Dark Reading is part of the Informa Tech Division of Informa PLC

This site is operated by a business or businesses owned by Informa PLC and all copyright resides with them.Informa PLC's registered office is 5 Howick Place, London SW1P 1WG. Registered in England and Wales. Number 8860726.

Database Security
Authentication
Mobile
Privacy
Compliance
Careers and People
Identity & Access Management
Security Monitoring
Advanced Threats
Insider Threats
Vulnerability Management

Dark Reading Article Boards

Message Boards posted in August 2014
Page 1 / 2   >   >>
Online Dating Site Breached
Last Message: 8/31/2014  |  Comments: 1
CryptoWall More Pervasive, Less Profitable Than CryptoLocker
Last Message: 8/29/2014  |  Comments: 5
Feds Investigating Breaches At JP Morgan, Other Banks
Last Message: 8/29/2014  |  Comments: 8
Online Tools For Bug Disclosure Abound
Last Message: 8/29/2014  |  Comments: 4
Biggest Cache of Stolen Creds Ever Includes 1.2 Billion Unique Logins
Last Message: 8/28/2014  |  Comments: 16
The Best of the Rest of Black Hat: The Enterprise View
Last Message: 8/27/2014  |  Comments: 147
Access Point Pinched From Black Hat Show WLAN
Last Message: 8/27/2014  |  Comments: 4
6 Biometric Factors That Are Working Today
Last Message: 8/27/2014  |  Comments: 23
Debugging The Myths Of Heartbleed
Last Message: 8/26/2014  |  Comments: 5
Nuclear Regulatory Commission Compromised 3 Times In Past 3 Years
Last Message: 8/26/2014  |  Comments: 5
Flash Poll: CSOs Need A New Boss
Last Message: 8/26/2014  |  Comments: 4
27 Million South Koreans Victimized In Online Gaming Heist
Last Message: 8/26/2014  |  Comments: 6
Hacker Or Military? Best Of Both In Cyber Security
Last Message: 8/26/2014  |  Comments: 6
Security of 'Things'
Last Message: 8/26/2014  |  Comments: 3
51 UPS Stores' Point-of-Sale Systems Breached
Last Message: 8/25/2014  |  Comments: 7
JP Morgan Targeted in New Phishing Campaign
Last Message: 8/25/2014  |  Comments: 4
Website Attack Attempts Via Vegas Rose During Black Hat, DEF CON
Last Message: 8/24/2014  |  Comments: 4
Active Directory Flaw Lets Attackers Change Passwords
Last Message: 8/23/2014  |  Comments: 12
US, German Researchers Build Android Security Framework
Last Message: 8/22/2014  |  Comments: 2
Infographic: 70 Percent of World's Critical Utilities Breached
Last Message: 8/20/2014  |  Comments: 8
Healthcare Information Security: Still No Respect
Last Message: 8/20/2014  |  Comments: 17
The Best of the Rest of Black Hat: Do Critical Systems Trust Too Much?
Last Message: 8/20/2014  |  Comments: 101
Q&A: DEF CON At 22
Last Message: 8/20/2014  |  Comments: 2
Cloud Apps & Security: When Sharing Matters
Last Message: 8/19/2014  |  Comments: 5
SuperValu Food Stores Reports Network Intrusion
Last Message: 8/19/2014  |  Comments: 8
Community Health Systems Breach Atypical For Chinese Hackers
Last Message: 8/19/2014  |  Comments: 8
Slideshow: Ten Free Security Monitoring Tools
Last Message: 8/19/2014  |  Comments: 1
Google Sounds Chrome Browser Hijack Alarm
Last Message: 8/18/2014  |  Comments: 6
NSA Collected More Records Than Court Allowed
Last Message: 8/18/2014  |  Comments: 5
Time To Broaden CompSci Curriculum Beyond STEM
Last Message: 8/18/2014  |  Comments: 15
Stuxnet Exploits Still Alive & Well
Last Message: 8/18/2014  |  Comments: 3
UK Reconsidering Biometrics
Last Message: 8/16/2014  |  Comments: 4
CloudBot: A Free, Malwareless Alternative To Traditional Botnets
Last Message: 8/16/2014  |  Comments: 1
Closing The Skills Gap Between Hackers & Defenders: 4 Steps
Last Message: 8/16/2014  |  Comments: 17
"Hack My Google Glass: Security's Next Big Worry?"
Last Message: 8/16/2014  |  Comments: 7
Test Drive: GFI LanGuard 2014
Last Message: 8/15/2014  |  Comments: 1
Why Patching Makes My Heart Bleed
Last Message: 8/15/2014  |  Comments: 2
Heartbleed, GotoFail Bring Home Pwnie Awards
Last Message: 8/15/2014  |  Comments: 5
Hosting Companies' Traffic Hijacked In Crypto Currency Heist
Last Message: 8/15/2014  |  Comments: 2
Internet Of Things Security Reaches Tipping Point
Last Message: 8/15/2014  |  Comments: 11
Researcher Finds Potholes In Vehicle Traffic Control Systems
Last Message: 8/14/2014  |  Comments: 15
The Best of the Rest of Black Hat, Part 1
Last Message: 8/13/2014  |  Comments: 64
No Fixes In Sight For Satellite Terminal Flaws
Last Message: 8/12/2014  |  Comments: 2
Dan Geer Touts Liability Policies For Software Vulnerabilities
Last Message: 8/12/2014  |  Comments: 6
Automakers Openly Challenged To Bake In Security
Last Message: 8/12/2014  |  Comments: 3
Payment Card Data Theft: Tips For Small Business
Last Message: 8/12/2014  |  Comments: 8
The Hyperconnected World Has Arrived
Last Message: 8/11/2014  |  Comments: 6
The Illegitimate Milliner’s Guide to Black Hat
Last Message: 8/11/2014  |  Comments: 9
TSA Checkpoint Systems Found Exposed on the Net
Last Message: 8/10/2014  |  Comments: 2
Device-Based Mass-Market Authentication Rollout
Last Message: 8/8/2014  |  Comments: 1
Page 1 / 2   >   >>


News
US Formally Attributes SolarWinds Attack to Russian Intelligence Agency
Jai Vijayan, Contributing Writer,  4/15/2021
News
Dependency Problems Increase for Open Source Components
Robert Lemos, Contributing Writer,  4/14/2021
News
FBI Operation Remotely Removes Web Shells From Exchange Servers
Kelly Sheridan, Staff Editor, Dark Reading,  4/14/2021
Register for Dark Reading Newsletters
White Papers
Video
Cartoon Contest
Write a Caption, Win an Amazon Gift Card! Click Here
Post a Comment
Current Issue
2021 Top Enterprise IT Trends
We've identified the key trends that are poised to impact the IT landscape in 2021. Find out why they're important and how they will affect you today!
Flash Poll
Twitter Feed
Dark Reading - Bug Report
Bug Report
Enterprise Vulnerabilities
From DHS/US-CERT's National Vulnerability Database
CVE-2021-31547
PUBLISHED: 2021-04-22
An issue was discovered in the AbuseFilter extension for MediaWiki through 1.35.2. Its AbuseFilterCheckMatch API reveals suppressed edits and usernames to unprivileged users through the iteration of crafted AbuseFilter rules.
CVE-2021-31548
PUBLISHED: 2021-04-22
An issue was discovered in the AbuseFilter extension for MediaWiki through 1.35.2. A MediaWiki user who is partially blocked or was unsuccessfully blocked could bypass AbuseFilter and have their edits completed.
CVE-2021-31549
PUBLISHED: 2021-04-22
An issue was discovered in the AbuseFilter extension for MediaWiki through 1.35.2. The Special:AbuseFilter/examine form allowed for the disclosure of suppressed MediaWiki usernames to unprivileged users.
CVE-2021-31550
PUBLISHED: 2021-04-22
An issue was discovered in the CommentBox extension for MediaWiki through 1.35.2. Via crafted configuration variables, a malicious actor could introduce XSS payloads into various layers.
CVE-2021-31551
PUBLISHED: 2021-04-22
An issue was discovered in the PageForms extension for MediaWiki through 1.35.2. Crafted payloads for Token-related query parameters allowed for XSS on certain PageForms-managed MediaWiki pages.