Careers & People

12/22/2017
09:00 AM
Connect Directly
Twitter
Twitter
RSS
E-Mail
50%
50%

CISO Holiday Miracle Wish List

If CISOs could make a wish to solve a problem, these would be among the top choices.
Previous
1 of 6
Next

Image Source: Adobe Stock (C) ra2 studio

Image Source: Adobe Stock ra2 studio

With the holiday season in full swing, this is the time of year that has people thinking of happy miracles. Which got us at Dark Reading pondering: if CISOs had their pick of career miracles this holiday season and New Year, what would their miracle be? Based on our engagement with security practitioners, data from recent surveys and opinions from industry pundits, here are our best guesses.

 

Ericka Chickowski specializes in coverage of information technology and business innovation. She has focused on information security for the better part of a decade and regularly writes about the security industry as a contributor to Dark Reading.  View Full Bio

Previous
1 of 6
Next
Comment  | 
Print  | 
More Insights
Comments
Oldest First  |  Newest First  |  Threaded View
cybersavior
100%
0%
cybersavior,
User Rank: Strategist
12/27/2017 | 11:43:39 AM
The big chair
That's why the big "top security person" chair is so precarious.  "Career Is Soon Over" (CISO), as they say.  It's true.  It is always the hot seat when you are accountable to control and protect against the unknown with limited resources and finite labor.  One unpatched system, one rouge insider and you're toast.

Oh and I disliked the 6-page slideshow format.  I realize that it gets the host exponential opportunities to display ads and content but the consumer experience is annoying. 
WebAuthn, FIDO2 Infuse Browsers, Platforms with Strong Authentication
John Fontana, Standards & Identity Analyst, Yubico,  9/19/2018
NSS Labs Files Antitrust Suit Against Symantec, CrowdStrike, ESET, AMTSO
Kelly Jackson Higgins, Executive Editor at Dark Reading,  9/19/2018
Turn the NIST Cybersecurity Framework into Reality: 5 Steps
Mukul Kumar & Anupam Sahai, CISO & VP of Cyber Practice and VP Product Management, Cavirin Systems,  9/20/2018
Register for Dark Reading Newsletters
White Papers
Video
Cartoon Contest
Current Issue
Flash Poll
Surviving the IT Security Skills Shortage
Surviving the IT Security Skills Shortage
Cybersecurity professionals are in high demand -- and short supply. Find out what Dark Reading discovered during their 2017 Security Staffing Survey and get some strategies for getting through the drought. Download the report today!
Twitter Feed
Dark Reading - Bug Report
Bug Report
Enterprise Vulnerabilities
From DHS/US-CERT's National Vulnerability Database
CVE-2018-17141
PUBLISHED: 2018-09-21
HylaFAX 6.0.6 and HylaFAX+ 5.6.0 allow remote attackers to execute arbitrary code via a dial-in session that provides a FAX page with the JPEG bit enabled, which is mishandled in FaxModem::writeECMData() in the faxd/CopyQuality.c++ file.
CVE-2018-17173
PUBLISHED: 2018-09-21
LG SuperSign CMS allows remote attackers to execute arbitrary code via the sourceUri parameter to qsr_server/device/getThumbnail.
CVE-2018-17174
PUBLISHED: 2018-09-21
A stack-based buffer overflow was discovered in the xtimor NMEA library (aka nmealib) 0.5.3. nmea_parse() in parser.c allows an attacker to trigger denial of service (even arbitrary code execution in a certain context) in a product using this library via malformed data.
CVE-2018-16822
PUBLISHED: 2018-09-21
SeaCMS 6.64 allows SQL Injection via the upload/admin/admin_video.php order parameter.
CVE-2018-16833
PUBLISHED: 2018-09-21
Zoho ManageEngine Desktop Central 10.0.271 has XSS via the "Features & Articles" search field to the /advsearch.do?SUBREQUEST=XMLHTTP URI.