Dark Reading is part of the Informa Tech Division of Informa PLC

This site is operated by a business or businesses owned by Informa PLC and all copyright resides with them.Informa PLC's registered office is 5 Howick Place, London SW1P 1WG. Registered in England and Wales. Number 8860726.

Dark Reading Article Boards

Message Boards posted in September 2014
Page 1 / 2   >   >>
New Bash Bugs Surface
Last Message: 9/30/2014
 |  Comments: 1
Hacking Humans
Last Message: 9/30/2014
 |  Comments: 2
Making Sense Of Shellshock Attack Chaos
Last Message: 9/30/2014
 |  Comments: 4
Data Privacy Etiquette: It's Not Just For Kids
Last Message: 9/30/2014
 |  Comments: 10
Shellshocked: A Future Of ‘Hair On Fire’ Bugs
Last Message: 9/30/2014
 |  Comments: 22
Apple: Majority Of Mac OS X Users Not At Risk To 'Shellshock'
Last Message: 9/30/2014
 |  Comments: 5
How SaaS Adoption Is Changing Cloud Security
Last Message: 9/29/2014
 |  Comments: 6
When Layers On Layers Of Security Equals LOL Security
Last Message: 9/29/2014
 |  Comments: 3
Breached Retailers Harden PoS, For Now
Last Message: 9/29/2014
 |  Comments: 8
Malvertising Could Rival Exploit Kits
Last Message: 9/26/2014
 |  Comments: 2
Bash Bug May Be Worse Than Heartbleed
Last Message: 9/26/2014
 |  Comments: 10
InfoSec Book Club: What’s On Your Fall Reading List?
Last Message: 9/25/2014
 |  Comments: 8
Study: 15 Million Devices Infected With Mobile Malware
Last Message: 9/25/2014
 |  Comments: 1
Jimmy John's Gourmet Sandwiches POS Systems Hacked
Last Message: 9/25/2014
 |  Comments: 4
5 Top Tips For Outsourced Security
Last Message: 9/25/2014
 |  Comments: 5
Incident Response Fail
Last Message: 9/24/2014
 |  Comments: 1
Mobile-Only Employee Trend Could Break Security Models
Last Message: 9/24/2014
 |  Comments: 10
ISIS Cyber Threat To US Under Debate
Last Message: 9/24/2014
 |  Comments: 7
Hot Issues in Application Security
Last Message: 9/24/2014
 |  Comments: 58
Creating A DDoS Response Playbook
Last Message: 9/24/2014
 |  Comments: 1
'Hand-To-Hand Digital Combat' With Threat Actors
Last Message: 9/23/2014
 |  Comments: 2
An AppSec Report Card: Developers Barely Passing
Last Message: 9/23/2014
 |  Comments: 11
US Military In The Dark On Cyberattacks Against Contractors
Last Message: 9/23/2014
 |  Comments: 2
5 Ways To Think Outside The PCI Checkbox
Last Message: 9/23/2014
 |  Comments: 6
The Truth About Ransomware: You’re On Your Own
Last Message: 9/22/2014
 |  Comments: 1
Is Enterprise IT Security Ready For iOS 8?
Last Message: 9/22/2014
 |  Comments: 4
DR Radio: A Grown-Up Conversation About Passwords
Last Message: 9/19/2014
 |  Comments: 7
Google Backs New Effort To Simplify Security
Last Message: 9/19/2014
 |  Comments: 12
6 Tips For Securing Social Media In The Workplace
Last Message: 9/19/2014
 |  Comments: 11
Meet The Next Next-Gen Firewall
Last Message: 9/18/2014
 |  Comments: 3
Cyberspies Resuscitate Citadel Trojan For Petrochemical Attacks
Last Message: 9/18/2014
 |  Comments: 5
In Defense Of Passwords
Last Message: 9/17/2014
 |  Comments: 12
A Grown-Up Conversation About Passwords
Last Message: 9/17/2014
 |  Comments: 118
Weak Password Advice From Microsoft
Last Message: 9/17/2014
 |  Comments: 16
Worm Illuminates Potential NAS Nightmare
Last Message: 9/17/2014
 |  Comments: 6
Google: No Breach In Latest Online Dump Of Credentials
Last Message: 9/17/2014
 |  Comments: 3
Hacking Password Managers
Last Message: 9/16/2014
 |  Comments: 13
Privacy, Security & The Geography Of Data Protection
Last Message: 9/16/2014
 |  Comments: 6
Apple Pay: A Necessary Push To Transform Consumer Payments
Last Message: 9/15/2014
 |  Comments: 16
Veracode Secures $40M In Funding As IPO Looms
Last Message: 9/15/2014
 |  Comments: 1
Home Depot Breach May Not Be Related To BlackPOS, Target
Last Message: 9/15/2014
 |  Comments: 5
Page 1 / 2   >   >>


Edge-DRsplash-10-edge-articles
I Smell a RAT! New Cybersecurity Threats for the Crypto Industry
David Trepp, Partner, IT Assurance with accounting and advisory firm BPM LLP,  7/9/2021
News
Attacks on Kaseya Servers Led to Ransomware in Less Than 2 Hours
Robert Lemos, Contributing Writer,  7/7/2021
Commentary
It's in the Game (but It Shouldn't Be)
Tal Memran, Cybersecurity Expert, CYE,  7/9/2021
Register for Dark Reading Newsletters
White Papers
Video
Cartoon
Current Issue
The 10 Most Impactful Types of Vulnerabilities for Enterprises Today
Managing system vulnerabilities is one of the old est - and most frustrating - security challenges that enterprise defenders face. Every software application and hardware device ships with intrinsic flaws - flaws that, if critical enough, attackers can exploit from anywhere in the world. It's crucial that defenders take stock of what areas of the tech stack have the most emerging, and critical, vulnerabilities they must manage. It's not just zero day vulnerabilities. Consider that CISA's Known Exploited Vulnerabilities (KEV) catalog lists vulnerabilitlies in widely used applications that are "actively exploited," and most of them are flaws that were discovered several years ago and have been fixed. There are also emerging vulnerabilities in 5G networks, cloud infrastructure, Edge applications, and firmwares to consider.
Flash Poll
Twitter Feed
Dark Reading - Bug Report
Bug Report
Enterprise Vulnerabilities
From DHS/US-CERT's National Vulnerability Database
CVE-2023-1142
PUBLISHED: 2023-03-27
In Delta Electronics InfraSuite Device Master versions prior to 1.0.5, an attacker could use URL decoding to retrieve system files, credentials, and bypass authentication resulting in privilege escalation.
CVE-2023-1143
PUBLISHED: 2023-03-27
In Delta Electronics InfraSuite Device Master versions prior to 1.0.5, an attacker could use Lua scripts, which could allow an attacker to remotely execute arbitrary code.
CVE-2023-1144
PUBLISHED: 2023-03-27
Delta Electronics InfraSuite Device Master versions prior to 1.0.5 contains an improper access control vulnerability in which an attacker can use the Device-Gateway service and bypass authorization, which could result in privilege escalation.
CVE-2023-1145
PUBLISHED: 2023-03-27
Delta Electronics InfraSuite Device Master versions prior to 1.0.5 are affected by a deserialization vulnerability targeting the Device-DataCollect service, which could allow deserialization of requests prior to authentication, resulting in remote code execution.
CVE-2023-1655
PUBLISHED: 2023-03-27
Heap-based Buffer Overflow in GitHub repository gpac/gpac prior to 2.4.0.