Dark Reading is part of the Informa Tech Division of Informa PLC

This site is operated by a business or businesses owned by Informa PLC and all copyright resides with them.Informa PLC's registered office is 5 Howick Place, London SW1P 1WG. Registered in England and Wales. Number 8860726.

Dark Reading Article Boards

Message Boards posted in September 2019
Page 1 / 2   >   >>
7 Ways VPNs Can Turn from Ally to Threat
Last Message: 9/30/2019
 |  Comments: 3
iOS Hack Lets Attackers Brute Force iPhone, iPad Passcodes
Last Message: 9/30/2019
 |  Comments: 2
The Etiquette of Respecting Privacy in the Age of IoT
Last Message: 9/28/2019
 |  Comments: 1
Deutsche Bank Email Vulnerability Left Ex-Employees with Access
Last Message: 9/27/2019
 |  Comments: 2
Voting Machine Systems New & Old Contain 'Design' Flaws
Last Message: 9/27/2019
 |  Comments: 1
Cartoon: Dating (In)security
Last Message: 9/27/2019
 |  Comments: 7
From Hacking Systems To Hacking People
Last Message: 9/26/2019
 |  Comments: 8
New, Improved BEC Campaigns Target HR and Finance
Last Message: 9/25/2019
 |  Comments: 1
AI Is Everywhere, but Don't Ignore the Basics
Last Message: 9/25/2019
 |  Comments: 8
Snowden Sued by US Government Over His New Book
Last Message: 9/25/2019
 |  Comments: 1
How Do I Handle Security Alert Fatigue?
Last Message: 9/25/2019
 |  Comments: 1
Microsoft's Azure Sentinel SIEM Now Generally Available
Last Message: 9/25/2019
 |  Comments: 1
How to Define & Prioritize Risk Management Goals
Last Message: 9/25/2019
 |  Comments: 1
Name That Toon: Beat the Heat
Last Message: 9/25/2019
 |  Comments: 59
Don't Just Tune Your SIEM, Retune It
Last Message: 9/24/2019
 |  Comments: 1
WeWork's Wi-Fi Exposed Files, Credentials, Emails
Last Message: 9/24/2019
 |  Comments: 2
Automation: Friend of the SOC Analyst
Last Message: 9/23/2019
 |  Comments: 2
The 20 Worst Metrics in Cybersecurity
Last Message: 9/23/2019
 |  Comments: 2
Security Pros Value Disclosure ... Sometimes
Last Message: 9/23/2019
 |  Comments: 1
Cartoon Contest: Bedtime Stories
Last Message: 9/23/2019
 |  Comments: 11
Crowdsourced Security & the Gig Economy
Last Message: 9/23/2019
 |  Comments: 1
White House Cybersecurity Strategy at a Crossroads
Last Message: 9/20/2019
 |  Comments: 7
MITRE Releases 2019 List of Top 25 Software Weaknesses
Last Message: 9/19/2019
 |  Comments: 1
Cyber Criminals Focused on Credential Theft: Report
Last Message: 9/18/2019
 |  Comments: 1
US Turning Up the Heat on North Korea's Cyber Threat Operations
Last Message: 9/17/2019
 |  Comments: 3
Privacy 2019: We're Not Ready
Last Message: 9/16/2019
 |  Comments: 2
6 Questions to Ask Once Youve Learned of a Breach
Last Message: 9/16/2019
 |  Comments: 1
Hackers Poison Google Search Results to Deliver Zeus Panda
Last Message: 9/16/2019
 |  Comments: 1
Unsecured IoT: 8 Ways Hackers Exploit Firmware Vulnerabilities
Last Message: 9/15/2019
 |  Comments: 8
Yahoo Agrees to $80 Million Settlement with Investors
Last Message: 9/14/2019
 |  Comments: 1
Third-Party Features Leave Websites More Vulnerable to Attack
Last Message: 9/14/2019
 |  Comments: 2
NetCAT Vulnerability Is Out of the Bag
Last Message: 9/12/2019
 |  Comments: 1
It's Not Healthy to Confuse Compliance with Security
Last Message: 9/12/2019
 |  Comments: 5
Security & the Infinite Capacity to Rationalize
Last Message: 9/12/2019
 |  Comments: 2
Fed Kaspersky Ban Made Permanent by New Rules
Last Message: 9/11/2019
 |  Comments: 1
Cartoon: Identity Theft Mitigation
Last Message: 9/11/2019
 |  Comments: 7
Crimeware: How Criminals Built a Business to Target Businesses
Last Message: 9/10/2019
 |  Comments: 1
More Than 99% of Cyberattacks Need Victims' Help
Last Message: 9/10/2019
 |  Comments: 1
What Are the First Signs of a Cloud Data Leak?
Last Message: 9/10/2019
 |  Comments: 1
Black Hat: A Summer Break from the Mundane and Controllable
Last Message: 9/10/2019
 |  Comments: 1
Texas Refuses to Pay $2.5M in Massive Ransomware Attack
Last Message: 9/9/2019
 |  Comments: 1
The 7 Most Common RATS In Use Today
Last Message: 9/7/2019
 |  Comments: 4
Phishing Campaign Uses SharePoint to Slip Past Defenses
Last Message: 9/6/2019
 |  Comments: 2
ISAC 101: Unlocking the Power of Information
Last Message: 9/6/2019
 |  Comments: 1
Page 1 / 2   >   >>


COVID-19: Latest Security News & Commentary
Dark Reading Staff 6/4/2020
Abandoned Apps May Pose Security Risk to Mobile Devices
Robert Lemos, Contributing Writer,  5/29/2020
How AI and Automation Can Help Bridge the Cybersecurity Talent Gap
Peter Barker, Chief Product Officer at ForgeRock,  6/1/2020
Register for Dark Reading Newsletters
White Papers
Video
Cartoon Contest
Write a Caption, Win a Starbucks Card! Click Here
Latest Comment: What? IT said I needed virus protection!
Current Issue
How Cybersecurity Incident Response Programs Work (and Why Some Don't)
This Tech Digest takes a look at the vital role cybersecurity incident response (IR) plays in managing cyber-risk within organizations. Download the Tech Digest today to find out how well-planned IR programs can detect intrusions, contain breaches, and help an organization restore normal operations.
Flash Poll
Twitter Feed
Dark Reading - Bug Report
Bug Report
Enterprise Vulnerabilities
From DHS/US-CERT's National Vulnerability Database
CVE-2020-13768
PUBLISHED: 2020-06-04
In MiniShare before 1.4.2, there is a stack-based buffer overflow via an HTTP PUT request, which allows an attacker to achieve arbitrary code execution, a similar issue to CVE-2018-19861, CVE-2018-19862, and CVE-2019-17601. NOTE: this product is discontinued.
CVE-2020-13849
PUBLISHED: 2020-06-04
The MQTT protocol 3.1.1 requires a server to set a timeout value of 1.5 times the Keep-Alive value specified by a client, which allows remote attackers to cause a denial of service (loss of the ability to establish new connections), as demonstrated by SlowITe.
CVE-2020-13848
PUBLISHED: 2020-06-04
Portable UPnP SDK (aka libupnp) 1.12.1 and earlier allows remote attackers to cause a denial of service (crash) via a crafted SSDP message due to a NULL pointer dereference in the functions FindServiceControlURLPath and FindServiceEventURLPath in genlib/service_table/service_table.c.
CVE-2020-11682
PUBLISHED: 2020-06-04
Castel NextGen DVR v1.0.0 is vulnerable to CSRF in all state-changing request. A __RequestVerificationToken is set by the web interface, and included in requests sent by web interface. However, this token is not verified by the application: the token can be removed from all requests and the request ...
CVE-2020-12847
PUBLISHED: 2020-06-04
Pydio Cells 2.0.4 web application offers an administrative console named “Cells Console� that is available to users with an administrator role. This console provides an administrator user with the possibility of changing several settings, including the applicat...