Database Security
Authentication
Privacy
Compliance
Identity & Access Management
Security Monitoring
Advanced Threats
Insider Threats
Vulnerability Management

Author

Ray Le Maistre

Profile of Ray Le Maistre

Editor-in-chief
News & Commentary Posts: 1

Don't be fooled by the weird cod-French surname: Ray's as British as corned beef and bad teeth, despite affecting a sheen of Continental sophistication by his constant references to fancy-dan "proper" coffee. He's even trained as a barista, for god's sake.

Ray joined Light Reading in 2002 shortly after being shown the door and a very long corridor at Total Telecom. He has been in technology journalism since 1988, having worked at Computer Weekly, Communications WeekInternational and Communications International.

A slave to fashion, Ray is never seen in the same outfit twice. When not trawling the malls of Epsom, U.K., for the latest in skinny jeans and what-have-you, Ray is often to be heard banging on about SPIT (Service Provider Information Technology), which is also known as TATRTCA (The Acronym That Refuses To Catch On).

As a soccer nut, Ray likes nothing better than cheap jibes about Manchester United. If you bump into him at a trade show, be sure to make some remark about prawn-sandwich-eating supporters or similar – he'll love it!
Articles by Ray Le Maistre
'Hidden Tunnels' Help Hackers Launch Financial Services Attacks
Kelly Sheridan, Staff Editor, Dark Reading,  6/20/2018
Tesla Employee Steals, Sabotages Company Data
Jai Vijayan, Freelance writer,  6/19/2018
Inside a SamSam Ransomware Attack
Ajit Sancheti, CEO and Co-Founder, Preempt,  6/20/2018
Register for Dark Reading Newsletters
White Papers
Video
Cartoon
Current Issue
Flash Poll
Twitter Feed
Dark Reading - Bug Report
Bug Report
Enterprise Vulnerabilities
From DHS/US-CERT's National Vulnerability Database
CVE-2018-7682
PUBLISHED: 2018-06-22
Micro Focus Solutions Business Manager versions prior to 11.4 allows a user to invoke SBM RESTful services across domains.
CVE-2018-12689
PUBLISHED: 2018-06-22
phpLDAPadmin 1.2.2 allows LDAP injection via a crafted server_id parameter in a cmd.php?cmd=login_form request, or a crafted username and password in the login panel.
CVE-2018-12538
PUBLISHED: 2018-06-22
In Eclipse Jetty versions 9.4.0 through 9.4.8, when using the optional Jetty provided FileSessionDataStore for persistent storage of HttpSession details, it is possible for a malicious user to access/hijack other HttpSessions and even delete unmatched HttpSessions present in the FileSystem's storage...
CVE-2018-12684
PUBLISHED: 2018-06-22
Out-of-bounds Read in the send_ssi_file function in civetweb.c in CivetWeb through 1.10 allows attackers to cause a Denial of Service or Information Disclosure via a crafted SSI file.
CVE-2018-12687
PUBLISHED: 2018-06-22
tinyexr 0.9.5 has an assertion failure in DecodePixelData in tinyexr.h.