Dark Reading is part of the Informa Tech Division of Informa PLC

This site is operated by a business or businesses owned by Informa PLC and all copyright resides with them.Informa PLC's registered office is 5 Howick Place, London SW1P 1WG. Registered in England and Wales. Number 8860726.

Application Security //

Database Security

News & Commentary
The Security of Cloud Applications
Hillel Solow, CTO and Co-founder, ProtegoCommentary
Despite the great success of the cloud over the last decade, misconceptions continue to persist. Here's why the naysayers are wrong.
By Hillel Solow CTO and Co-founder, Protego, 7/11/2019
Comment4 comments  |  Read  |  Post a Comment
Britain Looks to Levy Record GDPR Fine Against British Airways
Robert Lemos, Contributing WriterNews
The penalty is a sign of things to come, say experts.
By Robert Lemos Contributing Writer, 7/8/2019
Comment0 comments  |  Read  |  Post a Comment
Federal Photos Filched in Contractor Breach
Dark Reading Staff, Quick Hits
Data should never have been on subcontractor's servers, says Customs and Border Protection.
By Dark Reading Staff , 6/10/2019
Comment1 Comment  |  Read  |  Post a Comment
Flipboard Confirms Two Hacks, Prompts Password Resets
Dark Reading Staff, Quick Hits
The company reports two incidents affected a subset of its users and is resetting passwords for involved accounts.
By Dark Reading Staff , 5/29/2019
Comment1 Comment  |  Read  |  Post a Comment
GandCrab Gets a SQL Update
Curtis Franklin Jr., Senior Editor at Dark ReadingNews
A new attack is found that uses MySQL as part of the attack chain in a GandCrab ransomware infection.
By Curtis Franklin Jr. Senior Editor at Dark Reading, 5/28/2019
Comment1 Comment  |  Read  |  Post a Comment
Data Asset Management: What Do You Really Need?
Kelly Sheridan, Staff Editor, Dark ReadingNews
At Interop, a cybersecurity and privacy leader explains her approach to data management and governance at a massive, decentralized company.
By Kelly Sheridan Staff Editor, Dark Reading, 5/22/2019
Comment0 comments  |  Read  |  Post a Comment
49 Million Instagram Influencer Records Exposed in Open Database
Dark Reading Staff, Quick Hits
An AWS-hosted database was configured with no username or password required for access to personal data.
By Dark Reading Staff , 5/21/2019
Comment0 comments  |  Read  |  Post a Comment
Misconfigured Ladders Database Exposed 13M User Records
Dark Reading Staff, Quick Hits
Job-hunting site Ladders leaves job seeker data exposed on the Internet.
By Dark Reading Staff , 5/2/2019
Comment1 Comment  |  Read  |  Post a Comment
Unknown, Unprotected Database Exposes Info on 80 Million US Households
Dark Reading Staff, Quick Hits
A database with no login required has been found to contain names, addresses, age, and more for over 80 million U.S. households.
By Dark Reading Staff , 4/29/2019
Comment9 comments  |  Read  |  Post a Comment
App Exposes Wi-Fi Credentials for Thousands of Private Networks
Dark Reading Staff, Quick Hits
A database used by WiFi Finder was left open and unprotected on the Internet.
By Dark Reading Staff , 4/23/2019
Comment2 comments  |  Read  |  Post a Comment
Data on Thousands of Law Enforcement Personnel Exposed in Breach
Dark Reading Staff, Quick Hits
Unknown hackers broke into databases of nonprofit and have posted online personal info on FBI, Secret Service, Capitol Police, US Park Police, others.
By Dark Reading Staff , 4/15/2019
Comment0 comments  |  Read  |  Post a Comment
In Security, All Logs Are Not Created Equal
Joe Partlow, Chief Technology Officer, ReliaQuestCommentary
Prioritizing key log sources goes a long way toward effective incident response.
By Joe Partlow Chief Technology Officer, ReliaQuest, 4/11/2019
Comment1 Comment  |  Read  |  Post a Comment
40% of Organizations Not Doing Enough to Protect Office 365 Data
Steve Zurier, Contributing WriterNews
Companies could be leaving themselves vulnerable by not using third-party data backup tools, a new report finds.
By Steve Zurier Contributing Writer, 3/28/2019
Comment4 comments  |  Read  |  Post a Comment
Enterprise Data Encryption Hits All-time High
Dark Reading Staff, Quick Hits
A new report by the Ponemon Institute shows 45% of organizations have a comprehensive encryption policy in place.
By Dark Reading Staff , 3/28/2019
Comment2 comments  |  Read  |  Post a Comment
Tidying Expert Marie Kondo: Cybersecurity Guru?
Curtis Franklin Jr., Senior Editor at Dark ReadingNews
The "KonMari" method of decluttering can be a huge step toward greater security, according to a growing number of executives.
By Curtis Franklin Jr. Senior Editor at Dark Reading, 3/28/2019
Comment8 comments  |  Read  |  Post a Comment
763M Email Addresses Exposed in Latest Database Misconfiguration Episode
Curtis Franklin Jr., Senior Editor at Dark ReadingNews
MongoDB once again used by database admin who opens unencrypted database to the whole world.
By Curtis Franklin Jr. Senior Editor at Dark Reading, 3/11/2019
Comment1 Comment  |  Read  |  Post a Comment
Hackers Break into System That Houses College Application Data
Dark Reading Staff, Quick Hits
More than 900 colleges and universities use Slate, owned by Technolutions, to collect and manage information on applicants.
By Dark Reading Staff , 3/11/2019
Comment4 comments  |  Read  |  Post a Comment
Debunking 5 Myths About Zero Trust Security
Torsten George, Cybersecurity Evangelist at CentrifyCommentary
Rather than "trust but verify," a zero trust model assumes that attackers will inevitably get in if they aren't already. However, several misconceptions are impeding its adoption.
By Torsten George Cybersecurity Evangelist at Centrify, 3/7/2019
Comment0 comments  |  Read  |  Post a Comment
Lockpath Advocates Benefits of Continuous Security Management
Dark Reading Staff, CommentaryVideo
Risk management and compliance technologies emerge from the intersection of technology, security, and regulation; continuous security management helps professionals from multiple departments and disciplines access the info they need, when they need it, according to Sam Abadir of Lockpath.
By Dark Reading Staff , 3/6/2019
Comment0 comments  |  Read  |  Post a Comment
Airbus Employee Info Exposed in Data Breach
Dark Reading Staff, Quick Hits
Few details as yet on a cyberattack that hit Airbus' commercial aircraft business.
By Dark Reading Staff , 1/31/2019
Comment0 comments  |  Read  |  Post a Comment
More Stories
Current Conversations
More Conversations
10 Ways to Keep a Rogue RasPi From Wrecking Your Network
Curtis Franklin Jr., Senior Editor at Dark Reading,  7/10/2019
The Security of Cloud Applications
Hillel Solow, CTO and Co-founder, Protego,  7/11/2019
A Lawyer's Guide to Cyber Insurance: 4 Basic Tips
Beth Burgin Waller, Chair, Cybersecurity & Data Privacy Practice , Woods Rogers PLC,  7/12/2019
Register for Dark Reading Newsletters
White Papers
Video
Cartoon Contest
Write a Caption, Win a Starbucks Card! Click Here
Latest Comment: "Jim, stop pretending you're drowning in tickets."
Current Issue
Building and Managing an IT Security Operations Program
As cyber threats grow, many organizations are building security operations centers (SOCs) to improve their defenses. In this Tech Digest you will learn tips on how to get the most out of a SOC in your organization - and what to do if you can't afford to build one.
Flash Poll
The State of IT Operations and Cybersecurity Operations
The State of IT Operations and Cybersecurity Operations
Your enterprise's cyber risk may depend upon the relationship between the IT team and the security team. Heres some insight on what's working and what isn't in the data center.
Twitter Feed
Dark Reading - Bug Report
Bug Report
Enterprise Vulnerabilities
From DHS/US-CERT's National Vulnerability Database
CVE-2019-13360
PUBLISHED: 2019-07-16
In CentOS-WebPanel.com (aka CWP) CentOS Web Panel 0.9.8.836, remote attackers can bypass authentication in the login process by leveraging knowledge of a valid username.
CVE-2019-13383
PUBLISHED: 2019-07-16
In CentOS-WebPanel.com (aka CWP) CentOS Web Panel 0.9.8.846, the Login process allows attackers to check whether a username is valid by reading the HTTP response.
CVE-2019-13603
PUBLISHED: 2019-07-16
An issue was discovered in the HID Global DigitalPersona (formerly Crossmatch) U.are.U 4500 Fingerprint Reader Windows Biometric Framework driver 5.0.0.5. It has a statically coded initialization vector to encrypt a user's fingerprint image, resulting in weak encryption of that. This, in combination...
CVE-2019-13605
PUBLISHED: 2019-07-16
In CentOS-WebPanel.com (aka CWP) CentOS Web Panel 0.9.8.838 to 0.9.8.846, remote attackers can bypass authentication in the login process by leveraging the knowledge of a valid username. The attacker must defeat an encoding that is not equivalent to base64, and thus this is different from CVE-2019-1...
CVE-2019-13615
PUBLISHED: 2019-07-16
VideoLAN VLC media player 3.0.7.1 has a heap-based buffer over-read in mkv::demux_sys_t::FreeUnused() in modules/demux/mkv/demux.cpp when called from mkv::Open in modules/demux/mkv/mkv.cpp.