Dark Reading is part of the Informa Tech Division of Informa PLC

This site is operated by a business or businesses owned by Informa PLC and all copyright resides with them.Informa PLC's registered office is 5 Howick Place, London SW1P 1WG. Registered in England and Wales. Number 8860726.

Database Security

Careers and People

Identity & Access Management

Security Monitoring

Advanced Threats

Insider Threats

Vulnerability Management

To InformationWeek

Network Computing Dark Reading

Advertise

Author

Ericka Chickowski

Profile of Ericka Chickowski

Contributing Writer

News & Commentary Posts: 651

Ericka Chickowski specializes in coverage of information technology and business innovation. She has focused on information security for the better part of a decade and regularly writes about the security industry as a contributor to Dark Reading.

Articles by Ericka Chickowski
posted in May 2015

View Content By Month

IRS Attack Demonstrates How Breaches Beget More Breaches

5/28/2015
Weak authentication validation assumed only taxpayers would know their Social Security Numbers and other information that criminals have been stealing for years.
Post a Comment

Oracle PeopleSoft In The Crosshairs

5/27/2015
Presenter at Hack In The Box says PeopleSoft is in worse security shape than SAP was five years ago.
Post a Comment

3 'Old' Attack Trends That Dominated Q1

5/19/2015
What's old is new as attackers recycle their attack patterns.
Post a Comment

Every 4 Seconds New Malware Is Born

5/18/2015
New report shows rate of new malware strains discovered increased by 77 percent in 2014.
Post a Comment

First Example Of SAP Breach Surfaces

5/12/2015
USIS attack in 2013 stealing background check information about government personnel with classified clearance came by way of an SAP exploit.
Post a Comment

10 Security Questions To Ask A Cloud Service Provider

5/12/2015
Help the business assess the risks of cloud services with these handy questions.
Post a Comment

3 Ways Attackers Will Own Your SAP

5/5/2015
SAP vulnerabilities that have been highlighted for years are now becoming attackers' favorite means of breaking into enterprises.
Post a Comment

Rapid7 Picks Up NTObjectives

5/4/2015
Adds 25 new employees and further diversifies testing capabilities.
Post a Comment

Editors' Choice

How Elite Analyst Teams are Transforming Security with Cyber Reconnaissance

Building the SOC of the Future: Next-Generation Security Operations

ROI and Beyond for the Cloud

Webinar Archives

White Papers

A Practical Guide to SASE Migration

2020 Gartner Market Guide for Network Detection & Response

Top Threats to Cloud Computing: The Egregious 11

The 2020 Duo Security Trusted Access Report

From MFA to Zero Trust

More White Papers

Cartoon Contest

Write a Caption, Win an Amazon Gift Card! Click Here

Latest Comment: Your password expired and you have been locked out of your machine. Give me your new 2FA code to continue.

Cartoon Archive

Current Issue

2020: The Year in Security

Download this Tech Digest for a look at the biggest security stories that - so far - have shaped a very strange and stressful year.

Download This Issue!

Back Issues | Must Reads

Flash Poll

Assessing Cybersecurity Risk in Today's Enterprises

Assessing Cybersecurity Risk in Today's Enterprises

COVID-19 has created a new IT paradigm in the enterprise -- and a new level of cybersecurity risk. This report offers a look at how enterprises are assessing and managing cyber-risk under the new normal.

The Malware Threat Landscape

How Data Breaches Affect the Enterprise (2020)

Building an Effective Cybersecurity Incident Response Team

Twitter Feed

Tweets about "from:DarkReading OR @DarkReading"

Dark Reading - Bug Report

Bug Report

Enterprise Vulnerabilities
From DHS/US-CERT's National Vulnerability Database

CVE-2020-12512
PUBLISHED: 2021-01-22

Pepperl+Fuchs Comtrol IO-Link Master in Version 1.5.48 and below is prone to an authenticated reflected POST Cross-Site Scripting

CVE-2020-12513
PUBLISHED: 2021-01-22

Pepperl+Fuchs Comtrol IO-Link Master in Version 1.5.48 and below is prone to an authenticated blind OS Command Injection.

CVE-2020-12514
PUBLISHED: 2021-01-22

Pepperl+Fuchs Comtrol IO-Link Master in Version 1.5.48 and below is prone to a NULL Pointer Dereference that leads to a DoS in discoveryd

CVE-2020-12525
PUBLISHED: 2021-01-22

M&M Software fdtCONTAINER Component in versions below 3.5.20304.x and between 3.6 and 3.6.20304.x is vulnerable to deserialization of untrusted data in its project storage.

CVE-2020-12511
PUBLISHED: 2021-01-22

Pepperl+Fuchs Comtrol IO-Link Master in Version 1.5.48 and below is prone to a Cross-Site Request Forgery (CSRF) in the web interface.

To save this item to your list of favorite Dark Reading content so you can find it later in your Profile page, click the "Save It" button next to the item.

If you found this interesting or useful, please use the links to the services below to share it with other readers. You will need a free account with each service to share an item via that service.
Tweet This
[close this box]