Dark Reading is part of the Informa Tech Division of Informa PLC

This site is operated by a business or businesses owned by Informa PLC and all copyright resides with them.Informa PLC's registered office is 5 Howick Place, London SW1P 1WG. Registered in England and Wales. Number 8860726.

Attacks/Breaches

News & Commentary
ADP Users Hit with Phishing Scam Ahead of Tax Season
Dark Reading Staff, Quick Hits
Fraudulent emails tell recipients their W-2 forms are ready and prompt them to click malicious links.
By Dark Reading Staff , 1/17/2020
Comment0 comments  |  Read  |  Post a Comment
With International Tensions Flaring, Cyber-Risk Is Heating Up for All Businesses
Curtis Franklin Jr., Senior Editor at Dark Reading
Risks of nation-state attacks go beyond Iran, and the need for awareness and security don't stop at any national border.
By Curtis Franklin Jr. Senior Editor at Dark Reading, 1/16/2020
Comment0 comments  |  Read  |  Post a Comment
New Attack Campaigns Suggest Emotet Threat Is Far From Over
Jai Vijayan, Contributing WriterNews
Malware described by the DHS as among the worst ever continues to evolve and grow, researchers from Cisco Talos, Cofense, and Check Point Software say.
By Jai Vijayan Contributing Writer, 1/16/2020
Comment1 Comment  |  Read  |  Post a Comment
NY Fed Reveals Implications of Cyberattack on US Financial System
Dark Reading Staff, Quick Hits
A "pre-mortem analysis" sheds light on the potential destruction of a cyberattack against major US banks.
By Dark Reading Staff , 1/16/2020
Comment0 comments  |  Read  |  Post a Comment
2017 Data Breach Will Cost Equifax at Least $1.38 Billion
Jai Vijayan, Contributing WriterNews
Company agrees to set aside a minimum of $380.5 million as breach compensation and spend another $1 billion on transforming its information security over the next five years. The 147 million US consumers affected by the breach have one week from today to file a claim.
By Jai Vijayan Contributing Writer, 1/15/2020
Comment0 comments  |  Read  |  Post a Comment
How to Comprehend the Buzz About Honeypots
Curtis Franklin Jr., Senior Editor at Dark Reading
Honeypots are crucial tools for security researchers and security teams. Understanding what they are and what they can do can be critical for making them safe and useful for your organization.
By Curtis Franklin Jr. Senior Editor at Dark Reading, 1/15/2020
Comment0 comments  |  Read  |  Post a Comment
Microsoft Patches Windows Vuln Discovered by the NSA
Kelly Sheridan, Staff Editor, Dark ReadingNews
The National Security Agency is publicly acknowledged for its finding and reporting of CVE-2020-0601, marking the start of what it says is a new approach to security.
By Kelly Sheridan Staff Editor, Dark Reading, 1/14/2020
Comment1 Comment  |  Read  |  Post a Comment
Cloud Adoption & Technology Change Create Gaps in Enterprise Security
Jai Vijayan, Contributing WriterNews
Many companies are struggling to get a handle on risk exposure because of visibility issues, Radware survey shows.
By Jai Vijayan Contributing Writer, 1/14/2020
Comment0 comments  |  Read  |  Post a Comment
'Fancy Bear' Targets Ukrainian Oil Firm Burisma in Phishing Attack
Dark Reading Staff, Quick Hits
The oil & gas company is at the heart of the ongoing US presidential impeachment case.
By Dark Reading Staff , 1/14/2020
Comment0 comments  |  Read  |  Post a Comment
Attackers Increasingly Focus on Business Disruption
Robert Lemos, Contributing WriterNews
Network intruders are staying undetected for an average of 95 days, enabling them to target critical systems and more completely disrupt business.
By Robert Lemos Contributing Writer, 1/14/2020
Comment0 comments  |  Read  |  Post a Comment
Global Predictions for Energy Cyber Resilience in 2020
Leo Simonovich, VP & Global Head, Industrial Cyber and Digital Security, Siemens EnergyCommentary
How prepared is the energy sector for an escalating attack surface in the operating technology environment? Here are five trends to watch.
By Leo Simonovich VP & Global Head, Industrial Cyber and Digital Security, Siemens Energy, 1/14/2020
Comment0 comments  |  Read  |  Post a Comment
Consumer Reports Calls for IoT Manufacturers to Raise Security Standards
Dark Reading Staff, Quick Hits
A letter to 25 companies says Consumer Reports will change ratings to reflect stronger security and privacy standards.
By Dark Reading Staff , 1/14/2020
Comment0 comments  |  Read  |  Post a Comment
Dustman Attack Underscores Iran's Cyber Capabilities
Robert Lemos, Contributing WriterNews
For nearly six months, an attack group linked to Iran reportedly had access to the network of Bahrain's national oil company, Bapco, before it executed a destructive payload.
By Robert Lemos Contributing Writer, 1/14/2020
Comment0 comments  |  Read  |  Post a Comment
Processor Vulnerabilities Put Virtual Workloads at Risk
Marc Laliberte, Senior Security Analyst, WatchGuard TechnologiesCommentary
Meltdown, Spectre exploits will likely lead to customers making tradeoffs between performance and security of applications, especially virtual and cloud-based apps
By Marc Laliberte Senior Security Analyst, WatchGuard Technologies, 1/14/2020
Comment0 comments  |  Read  |  Post a Comment
Website Collecting Australian Fire Donations Hit by Magecart
Dark Reading Staff, Quick Hits
The attack may have compromised donors' payment information.
By Dark Reading Staff , 1/13/2020
Comment0 comments  |  Read  |  Post a Comment
Texas School District Loses $2.3M to Phishing Attack
Dark Reading Staff, Quick Hits
The Manor Independent School District is investigating a phishing email scam that led to three separate fraudulent transactions.
By Dark Reading Staff , 1/13/2020
Comment0 comments  |  Read  |  Post a Comment
Will This Be the Year of the Branded Cybercriminal?
Raveed Laeb, Product Manager at KELACommentary
Threat actors will continue to grow enterprise-style businesses that evolve just like their legitimate counterparts.
By Raveed Laeb Product Manager at KELA, 1/13/2020
Comment1 Comment  |  Read  |  Post a Comment
Indian National Pleads Guilty to Multimillion-Dollar Call Center Scam
Dark Reading Staff, Quick Hits
The India-based call centers scammed US victims out of millions of dollars between 2013 and 2016.
By Dark Reading Staff , 1/10/2020
Comment1 Comment  |  Read  |  Post a Comment
5 Tips on How to Build a Strong Security Metrics Framework
Joshua Goldfarb, Independent ConsultantCommentary
The carpentry maxim "measure twice, cut once" underscores the importance of timely, accurate, and regular metrics to inform security leaders' risk decisions.
By Joshua Goldfarb Independent Consultant, 1/10/2020
Comment0 comments  |  Read  |  Post a Comment
Attackers Increase Focus on North American Electric Utilities: Report
Robert Lemos, Contributing WriterNews
Electric utilities continue to be a target of nation-state attackers, even before the latest tensions between Iran and the United States, says a critical-infrastructure security firm.
By Robert Lemos Contributing Writer, 1/9/2020
Comment0 comments  |  Read  |  Post a Comment
More Stories
Current Conversations
More Conversations
PR Newswire
Major Brazilian Bank Tests Homomorphic Encryption on Financial Data
Kelly Sheridan, Staff Editor, Dark Reading,  1/10/2020
Exploits Released for As-Yet Unpatched Critical Citrix Flaw
Jai Vijayan, Contributing Writer,  1/13/2020
Microsoft Patches Windows Vuln Discovered by the NSA
Kelly Sheridan, Staff Editor, Dark Reading,  1/14/2020
Register for Dark Reading Newsletters
White Papers
Video
Cartoon Contest
Write a Caption, Win a Starbucks Card! Click Here
Post a Comment
Current Issue
The Year in Security: 2019
This Tech Digest provides a wrap up and overview of the year's top cybersecurity news stories. It was a year of new twists on old threats, with fears of another WannaCry-type worm and of a possible botnet army of Wi-Fi routers. But 2019 also underscored the risk of firmware and trusted security tools harboring dangerous holes that cybercriminals and nation-state hackers could readily abuse. Read more.
Flash Poll
[Just Released] How Enterprises are Attacking the Cybersecurity Problem
[Just Released] How Enterprises are Attacking the Cybersecurity Problem
Organizations have invested in a sweeping array of security technologies to address challenges associated with the growing number of cybersecurity attacks. However, the complexity involved in managing these technologies is emerging as a major problem. Read this report to find out what your peers biggest security challenges are and the technologies they are using to address them.
Twitter Feed
Dark Reading - Bug Report
Bug Report
Enterprise Vulnerabilities
From DHS/US-CERT's National Vulnerability Database
CVE-2019-3686
PUBLISHED: 2020-01-17
openQA before commit c172e8883d8f32fced5e02f9b6faaacc913df27b was vulnerable to XSS in the distri and version parameter. This was reported through the bug bounty program of Offensive Security
CVE-2019-3683
PUBLISHED: 2020-01-17
The keystone-json-assignment package in SUSE Openstack Cloud 8 before commit d7888c75505465490250c00cc0ef4bb1af662f9f every user listed in the /etc/keystone/user-project-map.json was assigned full "member" role access to every project. This allowed these users to access, modify, create and...
CVE-2019-3682
PUBLISHED: 2020-01-17
The docker-kubic package in SUSE CaaS Platform 3.0 before 17.09.1_ce-7.6.1 provided access to an insecure API locally on the Kubernetes master node.
CVE-2019-17361
PUBLISHED: 2020-01-17
In SaltStack Salt through 2019.2.0, the salt-api NEST API with the ssh client enabled is vulnerable to command injection. This allows an unauthenticated attacker with network access to the API endpoint to execute arbitrary code on the salt-api host.
CVE-2019-19142
PUBLISHED: 2020-01-17
Intelbras WRN240 devices do not require authentication to replace the firmware via a POST request to the incoming/Firmware.cfg URI.