Dark Reading is part of the Informa Tech Division of Informa PLC

This site is operated by a business or businesses owned by Informa PLC and all copyright resides with them.Informa PLC's registered office is 5 Howick Place, London SW1P 1WG. Registered in England and Wales. Number 8860726.

Database Security

Careers and People

Identity & Access Management

Security Monitoring

Advanced Threats

Insider Threats

Vulnerability Management

To InformationWeek

Network Computing Dark Reading

Advertise

Author

Profile of Joan Goodchild

Contributing Writer

News & Commentary Posts: 57

Joan Goodchild is a veteran journalist, editor, and writer who has been covering security for more than a decade. She has written for several publications and previously served as editor-in-chief for CSO Online.

Articles by Joan Goodchild
posted in December 2019

View Content By Month

Cybercrime's Most Lucrative Careers

12/31/2019
Crime pays. Really well. Here's a look at just how much a cybercriminal can earn in a month.
Post a Comment

6 CISO New Year's Resolutions for 2020

12/30/2019
We asked chief information security officers how they plan to get their infosec departments in shape next year.
Post a Comment

Real-Time Payment Platforms Offer Fast Cash & Fast Fraud

12/19/2019
Real-time payment services like The Clearing House and Zelle will completely clear transactions in an instant...but account takeover attackers love that speed as much as you do.
Post a Comment

'Motivating People Who Want the Struggle': Expert Advice on InfoSec Leadership

12/13/2019
Industry veteran and former Intel security chief Malcolm Harkins pinpoints three essential elements for leaders to connect with their employees and drive business objectives.
Post a Comment

Security 101: What Is a Man-in-the-Middle Attack?

12/10/2019
A breakdown of the common ways criminals employ MitM techniques to snare victims, and tips for protecting users from these dirty tricks.
Post a Comment

10 Security 'Chestnuts' We Should Roast Over the Open Fire

12/5/2019
These outdated security rules we all know (and maybe live by) no longer apply.
Post a Comment

Editors' Choice

More SolarWinds Attack Details Emerge

Kelly Jackson Higgins, Executive Editor at Dark Reading, 1/12/2021

Vulnerability Management Has a Data Problem

Tal Morgenstern, Co-Founder & Chief Product Officer, Vulcan Cyber, 1/14/2021

Who Is Responsible for Protecting Physical Security Systems From Cyberattacks?

IFSEC Global, Staff, 1/14/2021

Protecting Your Enterprise's Intellectual Property

Building the SOC of the Future: Next-Generation Security Operations

Making Cybersecurity Work in Small and Medium-Sized Businesses

Webinar Archives

White Papers

The 2020 Duo Security Trusted Access Report

The 2020 Duo Security Trusted Access Report

Managing OTT Content Distribution in the Connected World

Universal Internet Connectivity: Reality or Myth?

Frost Radar: Global Threat Intelligence Platform Market

More White Papers

Cartoon

Cartoon Archive

Current Issue

2020: The Year in Security

Download this Tech Digest for a look at the biggest security stories that - so far - have shaped a very strange and stressful year.

Download This Issue!

Back Issues | Must Reads

Flash Poll

Assessing Cybersecurity Risk in Today's Enterprises

Assessing Cybersecurity Risk in Today's Enterprises

COVID-19 has created a new IT paradigm in the enterprise -- and a new level of cybersecurity risk. This report offers a look at how enterprises are assessing and managing cyber-risk under the new normal.

The Malware Threat Landscape

How Data Breaches Affect the Enterprise (2020)

Building an Effective Cybersecurity Incident Response Team

Twitter Feed

Tweets about "from:DarkReading OR @DarkReading"

Dark Reading - Bug Report

Bug Report

Enterprise Vulnerabilities
From DHS/US-CERT's National Vulnerability Database

CVE-2020-4873
PUBLISHED: 2021-01-19

IBM Planning Analytics 2.0 could allow an attacker to obtain sensitive information due to an overly permissive CORS policy. IBM X-Force ID: 190836.

CVE-2020-4881
PUBLISHED: 2021-01-19

IBM Planning Analytics 2.0 could allow a remote attacker to obtain sensitive information, caused by the lack of server hostname verification for SSL/TLS communication. By sending a specially-crafted request, an attacker could exploit this vulnerability to obtain sensitive information. IBM X-Force ID...

CVE-2021-22498
PUBLISHED: 2021-01-19

XML External Entity Injection vulnerability in Micro Focus Application Lifecycle Management (Previously known as Quality Center) product. The vulnerability affects versions 12.x, 12.60 Patch 5 and earlier, 15.0.1 Patch 2 and earlier and 15.5. The vulnerability could be exploited to allow an XML Exte...

CVE-2021-25323
PUBLISHED: 2021-01-19

The default setting of MISP 2.4.136 did not enable the requirements (aka require_password_confirmation) to provide the previous password when changing a password.

CVE-2021-25324
PUBLISHED: 2021-01-19

MISP 2.4.136 has Stored XSS in the galaxy cluster view via a cluster name to app/View/GalaxyClusters/view.ctp.

To save this item to your list of favorite Dark Reading content so you can find it later in your Profile page, click the "Save It" button next to the item.

If you found this interesting or useful, please use the links to the services below to share it with other readers. You will need a free account with each service to share an item via that service.
Tweet This
[close this box]