Dark Reading is part of the Informa Tech Division of Informa PLC

This site is operated by a business or businesses owned by Informa PLC and all copyright resides with them.Informa PLC's registered office is 5 Howick Place, London SW1P 1WG. Registered in England and Wales. Number 8860726.

Database Security

Careers and People

Identity & Access Management

Security Monitoring

Advanced Threats

Insider Threats

Vulnerability Management

To InformationWeek

Network Computing Dark Reading

Advertise

Author

Profile of Steve Zurier

Contributing Writer

News & Commentary Posts: 230

Steve Zurier has more than 30 years of journalism and publishing experience and has covered networking, security, and IT as a writer and editor since 1992. Steve is based in Columbia, Md.

Articles by Steve Zurier
posted in March 2017

View Content By Month

Cloud Security: New Research Says IT Pros Still Skittish

3/29/2017
Respondents complain in two studies that traditional security tools don’t work in the cloud, and can’t deliver visibility across multiple cloud environments.
Post a Comment

20 Million Mobile Devices at High Risk of Attack, Study Finds

3/23/2017
Meanwhile, a separate report by Google says half of all Android devices didn't install a single security update in 2016.
Post a Comment

New Wave of Security Acquisitions Signals Start of Consolidation Trend

3/20/2017
A dozen recent high-profile deals reflect cybersecurity vendors' hopes of expanding their offerings with next-generation technology, ideas, and talent.
Post a Comment

Twitter Counter Hack Uses Familiar Attack Mode

3/15/2017
Experts advise users to be more aware of the potential downside of third-party apps.
Post a Comment

60% of Businesses Mistakenly Sent out Sensitive Documents

3/14/2017
Some 43% of organizations say they lack widely understood policies for securing internal documents.
Post a Comment

Most Federal Government Websites Lack Basic Security

3/9/2017
HTTPS and DNSSEC not used across the board on agency websites despite federal requirements to do so.
Post a Comment

9 Phishing Lures that Could Hijack your 2017 Tax Refund

3/9/2017
Scammers are taking an aggressive approach to tax season this year, packing attachments and links with banking Trojans, and fairly new strains of ransomware.
Post a Comment

New Cybersecurity Regulations Begin Today For NY Banks

3/1/2017
New York's new security regulations for financial industry viewed as potential model for other states.
Post a Comment

Editors' Choice

Attackers Leave Stolen Credentials Searchable on Google

Kelly Sheridan, Staff Editor, Dark Reading, 1/21/2021

How to Better Secure Your Microsoft 365 Environment

Kelly Sheridan, Staff Editor, Dark Reading, 1/25/2021

Cybersecurity's Next Wave - What Every Enterprise Should Know

Strategies for Success with Digital Transformation

Building the SOC of the Future: Next-Generation Security Operations

Webinar Archives

White Papers

A Technical Deep Dive on Software Exploits

2020 Threat Hunting Report

A Practical Guide to SASE Migration

Zero Trust Evaluation Guide

Top Threats to Cloud Computing: The Egregious 11

More White Papers

Cartoon Contest

Write a Caption, Win an Amazon Gift Card! Click Here

Latest Comment: This comment is waiting for review by our moderators.

Cartoon Archive

Current Issue

2020: The Year in Security

Download this Tech Digest for a look at the biggest security stories that - so far - have shaped a very strange and stressful year.

Download This Issue!

Back Issues | Must Reads

Flash Poll

Assessing Cybersecurity Risk in Today's Enterprises

Assessing Cybersecurity Risk in Today's Enterprises

COVID-19 has created a new IT paradigm in the enterprise -- and a new level of cybersecurity risk. This report offers a look at how enterprises are assessing and managing cyber-risk under the new normal.

The Malware Threat Landscape

How Data Breaches Affect the Enterprise (2020)

Building an Effective Cybersecurity Incident Response Team

Twitter Feed

Tweets about "from:DarkReading OR @DarkReading"

Dark Reading - Bug Report

Bug Report

Enterprise Vulnerabilities
From DHS/US-CERT's National Vulnerability Database

CVE-2020-23359
PUBLISHED: 2021-01-27

WeBid 1.2.2 admin/newuser.php has an issue with password rechecking during registration because it uses a loose comparison to check the identicalness of two passwords. Two non-identical passwords can still bypass the check.

CVE-2020-23360
PUBLISHED: 2021-01-27

oscommerce v2.3.4.1 has a functional problem in user registration and password rechecking, where a non-identical password can bypass the checks in /catalog/admin/administrators.php and /catalog/password_reset.php

CVE-2020-23361
PUBLISHED: 2021-01-27

phpList 3.5.3 allows type juggling for login bypass because == is used instead of === for password hashes, which mishandles hashes that begin with 0e followed by exclusively numerical characters.

CVE-2021-25311
PUBLISHED: 2021-01-27

condor_credd in HTCondor before 8.9.11 allows Directory Traversal outside the SEC_CREDENTIAL_DIRECTORY_OAUTH directory, as demonstrated by creating a file under /etc that will later be executed by root.

CVE-2021-25312
PUBLISHED: 2021-01-27

HTCondor before 8.9.11 allows a user to submit a job as another user on the system, because of a flaw in the IDTOKENS authentication method.

To save this item to your list of favorite Dark Reading content so you can find it later in your Profile page, click the "Save It" button next to the item.

If you found this interesting or useful, please use the links to the services below to share it with other readers. You will need a free account with each service to share an item via that service.
Tweet This
[close this box]