Cloud
News & Commentary
The Week in Crypto: Bad News for SSH, WPA2, RSA & Privacy
Dawn Kawamoto, Associate Editor, Dark ReadingNews
Between KRACK, ROCA, new threats to SSH keys, and the European Commission's loosey-goosey stance on encryption backdoors, it's been a difficult time for cryptography.
By Dawn Kawamoto Associate Editor, Dark Reading, 10/20/2017
Comment0 comments  |  Read  |  Post a Comment
Banks Start Broad Use of Blockchain, as JP Morgan, IBM Lead Way
Ericka Chickowski, Contributing Writer, Dark ReadingNews
Two major players announced cross-border payment networks built on blockchain technologies Monday, and more financial services will follow soon, despite opinions about Bitcoin.
By Ericka Chickowski Contributing Writer, Dark Reading, 10/17/2017
Comment0 comments  |  Read  |  Post a Comment
Google Bolsters Security for Select Groups
Dark Reading Staff, Quick Hits
Business leaders, political campaign teams, journalists, and other high-risk groups will receive advanced email and account protection.
By Dark Reading Staff , 10/17/2017
Comment0 comments  |  Read  |  Post a Comment
Printers: The Weak Link in Enterprise Security
Kelly Sheridan, Associate Editor, Dark ReadingNews
Organizations frequently overlook printer security, leaving systems exposed to malware and theft. New tools aim to lessen the risk.
By Kelly Sheridan Associate Editor, Dark Reading, 10/16/2017
Comment4 comments  |  Read  |  Post a Comment
DoubleLocker Delivers Unique Two-Punch Hit to Android
Dawn Kawamoto, Associate Editor, Dark ReadingNews
Combines Android ransomware with capability to change users device PINs.
By Dawn Kawamoto Associate Editor, Dark Reading, 10/13/2017
Comment0 comments  |  Read  |  Post a Comment
Getting the Most Out of Cyber Threat Intelligence
Robert M. Lee, SANS Instructor & CEO, Dragos, Inc.Commentary
How security practitioners can apply structured analysis and move from putting out fires to fighting the arsonists.
By Robert M. Lee SANS Instructor & CEO, Dragos, Inc., 10/13/2017
Comment0 comments  |  Read  |  Post a Comment
10 Major Cloud Storage Security Slip-Ups (So Far) this Year
Kelly Sheridan, Associate Editor, Dark Reading
Accenture is the latest in a string of major companies to expose sensitive cloud data this year, following Verizon, Deloitte, and Dow Jones.
By Kelly Sheridan Associate Editor, Dark Reading, 10/13/2017
Comment1 Comment  |  Read  |  Post a Comment
Kaspersky Lab and the AV Security Hole
Jai Vijayan, Freelance writerNews
It's unclear what happened in the reported theft of NSA data by Russian spies, but an attacker would need little help to steal if he or she had privileged access to an AV vendor's network, security experts say.
By Jai Vijayan Freelance writer, 10/12/2017
Comment1 Comment  |  Read  |  Post a Comment
Security No. 1 Inhibitor to Microsoft Office 365 Adoption
Kelly Sheridan, Associate Editor, Dark ReadingNews
More businesses are switching to Office 365 despite fear of social engineering and ransomware attacks, but some remain wary.
By Kelly Sheridan Associate Editor, Dark Reading, 10/12/2017
Comment0 comments  |  Read  |  Post a Comment
Cybersecurity's 'Broken' Hiring Process
Kelly Jackson Higgins, Executive Editor at Dark ReadingNews
New study shows the majority of cybersecurity positions get filled at salaries above the original compensation cap, while jobs sit unfilled an average of six months.
By Kelly Jackson Higgins Executive Editor at Dark Reading, 10/11/2017
Comment12 comments  |  Read  |  Post a Comment
Equifax: 12.5 Million UK Client Records Exposed in Breach
Dark Reading Staff, Quick Hits
But of that data, it affects 700K of British consumers, credit-monitoring company said today.
By Dark Reading Staff , 10/10/2017
Comment0 comments  |  Read  |  Post a Comment
Microsoft Patches Windows Zero-Day Flaws Tied to DNSSEC
Kelly Jackson Higgins, Executive Editor at Dark ReadingNews
Security experts advise 'immediate' patching of critical DNS client vulnerabilities in Windows 8, 10, and other affected systems.
By Kelly Jackson Higgins Executive Editor at Dark Reading, 10/10/2017
Comment1 Comment  |  Read  |  Post a Comment
Key New Security Features in Android Oreo
Dawn Kawamoto, Associate Editor, Dark Reading
Android 8.0 Oreo marks a major revamp of Google's mobile operating system, putting in a number of new security-hardening measures.
By Dawn Kawamoto Associate Editor, Dark Reading, 10/10/2017
Comment1 Comment  |  Read  |  Post a Comment
More Businesses Accidentally Exposing Cloud Services
Dark Reading Staff, Quick Hits
53% of businesses using cloud storage services unintentionally expose them to the public.
By Dark Reading Staff , 10/9/2017
Comment1 Comment  |  Read  |  Post a Comment
Russian Hackers Targeted NSA Employee's Home Computer
Kelly Jackson Higgins, Executive Editor at Dark ReadingQuick Hits
New reports today say it was a National Security Agency employee, not a a contractor, whose home machine running Kaspersky Lab antivirus was hacked for classified files.
By Kelly Jackson Higgins Executive Editor at Dark Reading, 10/6/2017
Comment0 comments  |  Read  |  Post a Comment
Russian Hackers Pilfered Data from NSA Contractor's Home Computer: Report
Kelly Jackson Higgins, Executive Editor at Dark ReadingNews
Classified information and hacking tools from the US National Security Agency landed in the hands of Russian cyberspies, according to a Wall Street Journal report.
By Kelly Jackson Higgins Executive Editor at Dark Reading, 10/5/2017
Comment14 comments  |  Read  |  Post a Comment
10 Steps for Writing a Secure Mobile App
Dawn Kawamoto, Associate Editor, Dark Reading
Best practices to avoid the dangers of developing vulnerability-ridden apps.
By Dawn Kawamoto Associate Editor, Dark Reading, 10/5/2017
Comment0 comments  |  Read  |  Post a Comment
Ransomware Will Target Backups: 4 Ways to Protect Your Data
Rod Mathews, Senior VP and General Manager of Data ProtectionCommentary
Backups are the best way to take control of your defense against ransomware, but they need protecting as well.
By Rod Mathews Senior VP and General Manager of Data Protection, 10/4/2017
Comment1 Comment  |  Read  |  Post a Comment
Google Updates Cloud Access Management Policies
Dark Reading Staff, Quick Hits
Custom roles for Cloud Identity and Access Management will give users full control of 1,287 public permissions in the Google Cloud.
By Dark Reading Staff , 10/3/2017
Comment0 comments  |  Read  |  Post a Comment
DevOpsSec: A Big Step in Cloud Application Security
Jeff Schilling, Chief Security Officer, ArmorCommentary
Why it's time for DevOps and security teams to bury the hatchet -- and not in each other's back.
By Jeff Schilling Chief Security Officer, Armor, 10/3/2017
Comment0 comments  |  Read  |  Post a Comment
More Stories
Current Conversations
Posted by glennjdavis
Current Conversations hi
In reply to: hi
Post Your Own Reply
More Conversations
PR Newswire
Printers: The Weak Link in Enterprise Security
Kelly Sheridan, Associate Editor, Dark Reading,  10/16/2017
20 Questions to Ask Yourself before Giving a Security Conference Talk
Joshua Goldfarb, Co-founder & Chief Product Officer, IDDRA,  10/16/2017
Why Security Leaders Can't Afford to Be Just 'Left-Brained'
Bill Bradley, SVP, Cyber Engineering and Technical Services, CenturyLink,  10/17/2017
Register for Dark Reading Newsletters
White Papers
Video
Cartoon Contest
Current Issue
Security Vulnerabilities: The Next Wave
Just when you thought it was safe, researchers have unveiled a new round of IT security flaws. Is your enterprise ready?
Flash Poll
[Strategic Security Report] How Enterprises Are Attacking the IT Security Problem
[Strategic Security Report] How Enterprises Are Attacking the IT Security Problem
Enterprises are spending more of their IT budgets on cybersecurity technology. How do your organization's security plans and strategies compare to what others are doing? Here's an in-depth look.
Twitter Feed
Dark Reading - Bug Report
Bug Report
Enterprise Vulnerabilities
From DHS/US-CERT's National Vulnerability Database
CVE-2017-0290
Published: 2017-05-09
NScript in mpengine in Microsoft Malware Protection Engine with Engine Version before 1.1.13704.0, as used in Windows Defender and other products, allows remote attackers to execute arbitrary code or cause a denial of service (type confusion and application crash) via crafted JavaScript code within ...

CVE-2016-10369
Published: 2017-05-08
unixsocket.c in lxterminal through 0.3.0 insecurely uses /tmp for a socket file, allowing a local user to cause a denial of service (preventing terminal launch), or possibly have other impact (bypassing terminal access control).

CVE-2016-8202
Published: 2017-05-08
A privilege escalation vulnerability in Brocade Fibre Channel SAN products running Brocade Fabric OS (FOS) releases earlier than v7.4.1d and v8.0.1b could allow an authenticated attacker to elevate the privileges of user accounts accessing the system via command line interface. With affected version...

CVE-2016-8209
Published: 2017-05-08
Improper checks for unusual or exceptional conditions in Brocade NetIron 05.8.00 and later releases up to and including 06.1.00, when the Management Module is continuously scanned on port 22, may allow attackers to cause a denial of service (crash and reload) of the management module.

CVE-2017-0890
Published: 2017-05-08
Nextcloud Server before 11.0.3 is vulnerable to an inadequate escaping leading to a XSS vulnerability in the search module. To be exploitable a user has to write or paste malicious content into the search dialogue.