Dark Reading is part of the Informa Tech Division of Informa PLC

This site is operated by a business or businesses owned by Informa PLC and all copyright resides with them.Informa PLC's registered office is 5 Howick Place, London SW1P 1WG. Registered in England and Wales. Number 8860726.

Dark Reading Article Boards

Message Boards posted in September 2014
Page 1 / 2   >   >>
New Bash Bugs Surface
Last Message: 9/30/2014
 |  Comments: 1
Hacking Humans
Last Message: 9/30/2014
 |  Comments: 2
Making Sense Of Shellshock Attack Chaos
Last Message: 9/30/2014
 |  Comments: 4
Data Privacy Etiquette: It's Not Just For Kids
Last Message: 9/30/2014
 |  Comments: 10
Shellshocked: A Future Of Hair On Fire Bugs
Last Message: 9/30/2014
 |  Comments: 22
Apple: Majority Of Mac OS X Users Not At Risk To 'Shellshock'
Last Message: 9/30/2014
 |  Comments: 5
How SaaS Adoption Is Changing Cloud Security
Last Message: 9/29/2014
 |  Comments: 6
When Layers On Layers Of Security Equals LOL Security
Last Message: 9/29/2014
 |  Comments: 3
Breached Retailers Harden PoS, For Now
Last Message: 9/29/2014
 |  Comments: 8
Malvertising Could Rival Exploit Kits
Last Message: 9/26/2014
 |  Comments: 2
Bash Bug May Be Worse Than Heartbleed
Last Message: 9/26/2014
 |  Comments: 10
InfoSec Book Club: Whats On Your Fall Reading List?
Last Message: 9/25/2014
 |  Comments: 8
Study: 15 Million Devices Infected With Mobile Malware
Last Message: 9/25/2014
 |  Comments: 1
Jimmy John's Gourmet Sandwiches POS Systems Hacked
Last Message: 9/25/2014
 |  Comments: 4
5 Top Tips For Outsourced Security
Last Message: 9/25/2014
 |  Comments: 5
Incident Response Fail
Last Message: 9/24/2014
 |  Comments: 1
Mobile-Only Employee Trend Could Break Security Models
Last Message: 9/24/2014
 |  Comments: 10
ISIS Cyber Threat To US Under Debate
Last Message: 9/24/2014
 |  Comments: 7
Hot Issues in Application Security
Last Message: 9/24/2014
 |  Comments: 58
Creating A DDoS Response Playbook
Last Message: 9/24/2014
 |  Comments: 1
'Hand-To-Hand Digital Combat' With Threat Actors
Last Message: 9/23/2014
 |  Comments: 2
An AppSec Report Card: Developers Barely Passing
Last Message: 9/23/2014
 |  Comments: 11
US Military In The Dark On Cyberattacks Against Contractors
Last Message: 9/23/2014
 |  Comments: 2
5 Ways To Think Outside The PCI Checkbox
Last Message: 9/23/2014
 |  Comments: 6
The Truth About Ransomware: Youre On Your Own
Last Message: 9/22/2014
 |  Comments: 1
Is Enterprise IT Security Ready For iOS 8?
Last Message: 9/22/2014
 |  Comments: 4
DR Radio: A Grown-Up Conversation About Passwords
Last Message: 9/19/2014
 |  Comments: 7
Google Backs New Effort To Simplify Security
Last Message: 9/19/2014
 |  Comments: 12
6 Tips For Securing Social Media In The Workplace
Last Message: 9/19/2014
 |  Comments: 11
Meet The Next Next-Gen Firewall
Last Message: 9/18/2014
 |  Comments: 3
Cyberspies Resuscitate Citadel Trojan For Petrochemical Attacks
Last Message: 9/18/2014
 |  Comments: 5
In Defense Of Passwords
Last Message: 9/17/2014
 |  Comments: 12
A Grown-Up Conversation About Passwords
Last Message: 9/17/2014
 |  Comments: 118
Weak Password Advice From Microsoft
Last Message: 9/17/2014
 |  Comments: 16
Worm Illuminates Potential NAS Nightmare
Last Message: 9/17/2014
 |  Comments: 6
Google: No Breach In Latest Online Dump Of Credentials
Last Message: 9/17/2014
 |  Comments: 3
Hacking Password Managers
Last Message: 9/16/2014
 |  Comments: 13
Privacy, Security & The Geography Of Data Protection
Last Message: 9/16/2014
 |  Comments: 6
Apple Pay: A Necessary Push To Transform Consumer Payments
Last Message: 9/15/2014
 |  Comments: 16
Veracode Secures $40M In Funding As IPO Looms
Last Message: 9/15/2014
 |  Comments: 1
Home Depot Breach May Not Be Related To BlackPOS, Target
Last Message: 9/15/2014
 |  Comments: 5
Page 1 / 2   >   >>


Overcoming the Challenge of Shorter Certificate Lifespans
Mike Cooper, Founder & CEO of Revocent,  10/15/2020
7 Tips for Choosing Security Metrics That Matter
Ericka Chickowski, Contributing Writer,  10/19/2020
Register for Dark Reading Newsletters
White Papers
Video
Cartoon
Current Issue
Special Report: Computing's New Normal
This special report examines how IT security organizations have adapted to the "new normal" of computing and what the long-term effects will be. Read it and get a unique set of perspectives on issues ranging from new threats & vulnerabilities as a result of remote working to how enterprise security strategy will be affected long term.
Flash Poll
How IT Security Organizations are Attacking the Cybersecurity Problem
How IT Security Organizations are Attacking the Cybersecurity Problem
The COVID-19 pandemic turned the world -- and enterprise computing -- on end. Here's a look at how cybersecurity teams are retrenching their defense strategies, rebuilding their teams, and selecting new technologies to stop the oncoming rise of online attacks.
Twitter Feed
Dark Reading - Bug Report
Bug Report
Enterprise Vulnerabilities
From DHS/US-CERT's National Vulnerability Database
CVE-2020-27621
PUBLISHED: 2020-10-22
The FileImporter extension in MediaWiki through 1.35.0 was not properly attributing various user actions to a specific user's IP address. Instead, for various actions, it would report the IP address of an internal Wikimedia Foundation server by omitting X-Forwarded-For data. This resulted in an inab...
CVE-2020-27620
PUBLISHED: 2020-10-22
The Cosmos Skin for MediaWiki through 1.35.0 has stored XSS because MediaWiki messages were not being properly escaped. This is related to wfMessage and Html::rawElement, as demonstrated by CosmosSocialProfile::getUserGroups.
CVE-2020-27619
PUBLISHED: 2020-10-22
In Python 3 through 3.9.0, the Lib/test/multibytecodec_support.py CJK codec tests call eval() on content retrieved via HTTP.
CVE-2020-17454
PUBLISHED: 2020-10-21
WSO2 API Manager 3.1.0 and earlier has reflected XSS on the "publisher" component's admin interface. More precisely, it is possible to inject an XSS payload into the owner POST parameter, which does not filter user inputs. By putting an XSS payload in place of a valid Owner Name, a modal b...
CVE-2020-24421
PUBLISHED: 2020-10-21
Adobe InDesign version 15.1.2 (and earlier) is affected by a memory corruption vulnerability due to insecure handling of a malicious .indd file, potentially resulting in arbitrary code execution in the context of the current user. User interaction is required to exploit this vulnerability.