Dark Reading is part of the Informa Tech Division of Informa PLC

This site is operated by a business or businesses owned by Informa PLC and all copyright resides with them.Informa PLC's registered office is 5 Howick Place, London SW1P 1WG. Registered in England and Wales. Number 8860726.

Database Security

Careers and People

Identity & Access Management

Security Monitoring

Advanced Threats

Insider Threats

Vulnerability Management

To InformationWeek

Network Computing Dark Reading

Advertise

Author

Profile of Steve Zurier

Contributing Writer

News & Commentary Posts: 229

Steve Zurier has more than 30 years of journalism and publishing experience and has covered networking, security, and IT as a writer and editor since 1992. Steve is based in Columbia, Md.

Articles by Steve Zurier
posted in June 2016

View Content By Month

How To Bridge The Cyber Insurance Gap

6/29/2016
CISOs and insurance executives must unite and create more defined terminology and expectations for cyber insurance.
Post a Comment

5 Ways To Think Like A Hacker

6/24/2016
Security expert says CISOs need to use simulations more effectively so they can understand how hackers work and beat them at their own game.
Post a Comment

5 Tips For Making Data Privacy Part Of The Company’s Culture

6/22/2016
Common sense steps organizations can take to protect corporate data.
Post a Comment

An Inside Look At The Mitsubishi Outlander Hack

6/17/2016
White hat hacker finds WiFi flaws in mobile app for popular auto; Mitsubishi working on fix.
Post a Comment

3 Tips for Improving Communications with Top Management

6/14/2016
Here are some steps security managers can take to deliver the information the executive suite needs to make better decisions on cyber security.
Post a Comment

7 Data Classification Tips

6/11/2016
Make data classification a part of your total security program.
Post a Comment

5 Tips for Setting Up A Security Advisory Board

6/8/2016
When a company needs to up its game in security, forming a security board can help.
Post a Comment

Connected Cars: 6 Tips For Riding Safely With Onboard Devices

6/3/2016
Carnegie Mellon researchers note that the cheaper the after market device, the easier it can be hacked.
Post a Comment

5 Tips For Combating Phishing

6/1/2016
Phishing attacks are on the rise, but there are steps you can take to combat the threat.
Post a Comment

Editors' Choice

How Elite Analyst Teams are Transforming Security with Cyber Reconnaissance

Strategies for Success with Digital Transformation

ROI and Beyond for the Cloud

Webinar Archives

White Papers

Improving Your Enterprise's Protection With Cyber Resilience

The Essential Guide to Securing Remote Access

2020 SANS Enterprise Cloud Incident Response Survey

Full Body Exposure: CybelAngel Analysis of Medical Data Leaks

From MFA to Zero Trust

More White Papers

Cartoon Contest

Write a Caption, Win an Amazon Gift Card! Click Here

Latest Comment: Your password expired and you have been locked out of your machine. Give me your new 2FA code to continue.

Cartoon Archive

Current Issue

2020: The Year in Security

Download this Tech Digest for a look at the biggest security stories that - so far - have shaped a very strange and stressful year.

Download This Issue!

Back Issues | Must Reads

Flash Poll

Assessing Cybersecurity Risk in Today's Enterprises

Assessing Cybersecurity Risk in Today's Enterprises

COVID-19 has created a new IT paradigm in the enterprise -- and a new level of cybersecurity risk. This report offers a look at how enterprises are assessing and managing cyber-risk under the new normal.

The Malware Threat Landscape

How Data Breaches Affect the Enterprise (2020)

Building an Effective Cybersecurity Incident Response Team

Twitter Feed

Tweets about "from:DarkReading OR @DarkReading"

Dark Reading - Bug Report

Bug Report

Enterprise Vulnerabilities
From DHS/US-CERT's National Vulnerability Database

CVE-2020-12512
PUBLISHED: 2021-01-22

Pepperl+Fuchs Comtrol IO-Link Master in Version 1.5.48 and below is prone to an authenticated reflected POST Cross-Site Scripting

CVE-2020-12513
PUBLISHED: 2021-01-22

Pepperl+Fuchs Comtrol IO-Link Master in Version 1.5.48 and below is prone to an authenticated blind OS Command Injection.

CVE-2020-12514
PUBLISHED: 2021-01-22

Pepperl+Fuchs Comtrol IO-Link Master in Version 1.5.48 and below is prone to a NULL Pointer Dereference that leads to a DoS in discoveryd

CVE-2020-12525
PUBLISHED: 2021-01-22

M&M Software fdtCONTAINER Component in versions below 3.5.20304.x and between 3.6 and 3.6.20304.x is vulnerable to deserialization of untrusted data in its project storage.

CVE-2020-12511
PUBLISHED: 2021-01-22

Pepperl+Fuchs Comtrol IO-Link Master in Version 1.5.48 and below is prone to a Cross-Site Request Forgery (CSRF) in the web interface.

To save this item to your list of favorite Dark Reading content so you can find it later in your Profile page, click the "Save It" button next to the item.

If you found this interesting or useful, please use the links to the services below to share it with other readers. You will need a free account with each service to share an item via that service.
Tweet This
[close this box]