Dark Reading is part of the Informa Tech Division of Informa PLC

This site is operated by a business or businesses owned by Informa PLC and all copyright resides with them.Informa PLC's registered office is 5 Howick Place, London SW1P 1WG. Registered in England and Wales. Number 8860726.

Database Security

Careers and People

Identity & Access Management

Security Monitoring

Advanced Threats

Insider Threats

Vulnerability Management

To InformationWeek

Network Computing Dark Reading

Advertise

Author

Profile of Steve Zurier

Contributing Writer

News & Commentary Posts: 229

Steve Zurier has more than 30 years of journalism and publishing experience and has covered networking, security, and IT as a writer and editor since 1992. Steve is based in Columbia, Md.

Articles by Steve Zurier
posted in January 2017

View Content By Month

6 Free Ransomware Decryption Tools

1/30/2017
The No More Ransom group has been working to get free decryptor tools into the hands of security professionals and the general public.
Post a Comment

Pew Research Study Exposes America's Poor Password Hygiene

1/26/2017
Americans feel like they've lost control over their online lives, but they still aren't always practicing proper security.
Post a Comment

Email Encryption On The Rise But Still Not 'Universal'

1/24/2017
Osterman study finds that more than half of organizations in North America use email encryption for external communications.
Post a Comment

Security Pros Say On-The-Job Experience Counts The Most

1/18/2017
Surviving the cybersecurity skills crisis requires investing more in the resources you have, experts say.
Post a Comment

10 Cocktail Party Security Tips From The Experts

1/13/2017
Security pros offer basic advice to help average users ward off the bad guys.
Post a Comment

Survey Points to Slight Rise in Adaptive Authentication Over 2FA

1/11/2017
SecureAuth study reports a majority of IT decision makers and security pros have issues with two-factor authentication.
Post a Comment

Editors' Choice

How Elite Analyst Teams are Transforming Security with Cyber Reconnaissance

Strategies for Success with Digital Transformation

ROI and Beyond for the Cloud

Webinar Archives

White Papers

Improving Your Enterprise's Protection With Cyber Resilience

The Essential Guide to Securing Remote Access

2020 SANS Enterprise Cloud Incident Response Survey

Full Body Exposure: CybelAngel Analysis of Medical Data Leaks

From MFA to Zero Trust

More White Papers

Cartoon Contest

Write a Caption, Win an Amazon Gift Card! Click Here

Latest Comment: Your password expired and you have been locked out of your machine. Give me your new 2FA code to continue.

Cartoon Archive

Current Issue

2020: The Year in Security

Download this Tech Digest for a look at the biggest security stories that - so far - have shaped a very strange and stressful year.

Download This Issue!

Back Issues | Must Reads

Flash Poll

Assessing Cybersecurity Risk in Today's Enterprises

Assessing Cybersecurity Risk in Today's Enterprises

COVID-19 has created a new IT paradigm in the enterprise -- and a new level of cybersecurity risk. This report offers a look at how enterprises are assessing and managing cyber-risk under the new normal.

The Malware Threat Landscape

How Data Breaches Affect the Enterprise (2020)

Building an Effective Cybersecurity Incident Response Team

Twitter Feed

Tweets about "from:DarkReading OR @DarkReading"

Dark Reading - Bug Report

Bug Report

Enterprise Vulnerabilities
From DHS/US-CERT's National Vulnerability Database

CVE-2020-12512
PUBLISHED: 2021-01-22

Pepperl+Fuchs Comtrol IO-Link Master in Version 1.5.48 and below is prone to an authenticated reflected POST Cross-Site Scripting

CVE-2020-12513
PUBLISHED: 2021-01-22

Pepperl+Fuchs Comtrol IO-Link Master in Version 1.5.48 and below is prone to an authenticated blind OS Command Injection.

CVE-2020-12514
PUBLISHED: 2021-01-22

Pepperl+Fuchs Comtrol IO-Link Master in Version 1.5.48 and below is prone to a NULL Pointer Dereference that leads to a DoS in discoveryd

CVE-2020-12525
PUBLISHED: 2021-01-22

M&M Software fdtCONTAINER Component in versions below 3.5.20304.x and between 3.6 and 3.6.20304.x is vulnerable to deserialization of untrusted data in its project storage.

CVE-2020-12511
PUBLISHED: 2021-01-22

Pepperl+Fuchs Comtrol IO-Link Master in Version 1.5.48 and below is prone to a Cross-Site Request Forgery (CSRF) in the web interface.

To save this item to your list of favorite Dark Reading content so you can find it later in your Profile page, click the "Save It" button next to the item.

If you found this interesting or useful, please use the links to the services below to share it with other readers. You will need a free account with each service to share an item via that service.
Tweet This
[close this box]