Dark Reading is part of the Informa Tech Division of Informa PLC

This site is operated by a business or businesses owned by Informa PLC and all copyright resides with them.Informa PLC's registered office is 5 Howick Place, London SW1P 1WG. Registered in England and Wales. Number 8860726.

Database Security
Authentication
Mobile
Privacy
Compliance
Careers and People
Identity & Access Management
Security Monitoring
Advanced Threats
Insider Threats
Vulnerability Management
11 Cybersecurity Vendors to Watch in 2021
Required MFA Is Not Sufficient for Strong Security: Report
Know Thy Enemy: Fighting Half-Blind Against Ransomware Won't Work
New Top 20 Secure-Coding List Positions PLCs as Plant 'Bodyguards'
News & Commentary
Did Companies Fail to Disclose Being Affected by SolarWinds Breach?
Jai Vijayan, Contributing WriterNews
The SEC has sent out letters to some investment firms and publicly listed companies seeking information, Reuters says.
By Jai Vijayan Contributing Writer, 6/21/2021
Comment0 comments  |  Read  |  Post a Comment
Software-Container Supply Chain Sees Spike in Attacks
Robert Lemos, Contributing WriterNews
Attackers target companies' container supply chain, driving a sixfold increase in a year, aiming to steal processing time for cryptomining and compromise cloud infrastructure.
By Robert Lemos Contributing Writer, 6/21/2021
Comment0 comments  |  Read  |  Post a Comment
Data Leaked in Fertility Clinic Ransomware Attack
Dark Reading Staff, Quick Hits
Reproductive Biology Associates says the data of 38,000 patients may have been compromised in the April cyberattack.
By Dark Reading Staff , 6/21/2021
Comment0 comments  |  Read  |  Post a Comment
Baltimore County Public Schools' Ransomware Recovery Tops $8M
Dark Reading Staff, Quick Hits
The school district has spent seven months and a reported $8.1 million recovering from the November attack.
By Dark Reading Staff , 6/21/2021
Comment0 comments  |  Read  |  Post a Comment
Are Ransomware Attacks the New Pandemic?
Bill Harrod, Federal CTO, IvantiCommentary
Ransomware has been a problem for decades, so why is government just now beginning to address it?
By Bill Harrod Federal CTO, Ivanti, 6/21/2021
Comment0 comments  |  Read  |  Post a Comment
Attackers Find New Way to Exploit Google Docs for Phishing
Jai Vijayan, Contributing WriterNews
Tactic continues recent trend by attackers to use trusted cloud services to send and host malicious content.
By Jai Vijayan Contributing Writer, 6/18/2021
Comment0 comments  |  Read  |  Post a Comment
This Week in Database Leaks: Cognyte, CVS, Wegmans
Kelly Sheridan, Staff Editor, Dark ReadingNews
Billions of records were found exposed this week due to unprotected databases owned by major corporations and third-party providers.
By Kelly Sheridan Staff Editor, Dark Reading, 6/18/2021
Comment0 comments  |  Read  |  Post a Comment
Accidental Insider Leaks Prove Major Source of Risk
Dark Reading Staff, Quick Hits
Research reports highlight growing concerns around insider negligence that leads to data breaches.
By Dark Reading Staff , 6/18/2021
Comment0 comments  |  Read  |  Post a Comment
11 Security Certifications to Seek Out This Summer
Steve Zurier, Contributing Writer
The more you know, the more you grow. The Edge takes a fresh look at leading security certifications that can help advance your career.
By Steve Zurier Contributing Writer, 6/18/2021
Comment0 comments  |  Read  |  Post a Comment
4 Habits of Highly Effective Security Operators
Ricardo Villadiego, Founder and CEO of LumuCommentary
These good habits can make all the difference in advancing careers for cybersecurity operators who spend their days putting out fires large and small.
By Ricardo Villadiego Founder and CEO of Lumu, 6/18/2021
Comment0 comments  |  Read  |  Post a Comment
Data Breaches Surge in Food & Beverage, Other Industries
Jai Vijayan, Contributing WriterNews
Six previously "under-attacked" vertical industries saw a surge in data breaches last year due to COVID-19 related disruptions and other factors, new data shows.
By Jai Vijayan Contributing Writer, 6/17/2021
Comment0 comments  |  Read  |  Post a Comment
One in Five Manufacturing Firms Targeted by Cyberattacks
Robert Lemos, Contributing WriterNews
Information-stealing malware makes up about a third of attacks, a study finds, but companies worry most about ransomware shutting down production.
By Robert Lemos Contributing Writer, 6/17/2021
Comment0 comments  |  Read  |  Post a Comment
Carnival Cruise Line Reports Security Breach
Dark Reading Staff, Quick Hits
The cruise ship operator says the incident affected employee and guest data.
By Dark Reading Staff , 6/17/2021
Comment0 comments  |  Read  |  Post a Comment
Google Launches SLSA, a New Framework for Supply Chain Integrity
Dark Reading Staff, Quick Hits
The "Supply chain Levels for Software Artifacts" aims to ensure the integrity of components throughout the software supply chain.
By Dark Reading Staff , 6/17/2021
Comment0 comments  |  Read  |  Post a Comment
Cyberattacks Are Tailored to Employees ... Why Isn't Security Training?
Tim Sadler, CEO and co-founder of TessianCommentary
Consider four factors and behaviors that impact a particular employee's risk, and how security training should take them into account.
By Tim Sadler CEO and co-founder of Tessian, 6/17/2021
Comment0 comments  |  Read  |  Post a Comment
Mission Critical: What Really Matters in a Cybersecurity Incident
Beth Burgin Waller, Chair, Cybersecurity & Data Privacy Practice , Woods Rogers PLCCommentary
The things you do before and during a cybersecurity incident can make or break the success of your response.
By Beth Burgin Waller Chair, Cybersecurity & Data Privacy Practice , Woods Rogers PLC, 6/17/2021
Comment0 comments  |  Read  |  Post a Comment
Ukraine Police Disrupt Cl0p Ransomware Operation
Jai Vijayan, Contributing WriterNews
Growing list of similar actions in recent months may finally be scaring some operators into quitting, but threat is far from over, security experts say.
By Jai Vijayan Contributing Writer, 6/16/2021
Comment0 comments  |  Read  |  Post a Comment
Ransomware Operators' Strategies Evolve as Attacks Rise
Kelly Sheridan, Staff Editor, Dark ReadingNews
Security researchers find ransomware operators rely less on email and more on criminal groups for initial access into target networks.
By Kelly Sheridan Staff Editor, Dark Reading, 6/16/2021
Comment0 comments  |  Read  |  Post a Comment
Biden Tells Putin Critical Infrastructure Sectors 'Off Limits' to Russian Hacking
Dark Reading Staff, Quick Hits
President Joe Biden said he and Russian President Vladimir Putin agreed to discuss boundaries in cyber activity.
By Dark Reading Staff , 6/16/2021
Comment0 comments  |  Read  |  Post a Comment
Security Flaw Discovered In Peloton Equipment
Dark Reading Staff, Quick Hits
The vulnerability could give attackers remote root access to the bike's tablet, researchers report.
By Dark Reading Staff , 6/16/2021
Comment0 comments  |  Read  |  Post a Comment
More Stories
Current Conversations
More Conversations
Products & Releases
CVE Program Expands Partnership with Spanish National Cybersecurity Institute (INCIBE)
60% of Organizations Would Consider Paying in the Event of a Ransomware Attack
Zscaler 2021 'Exposed' Report Reveals Corporate & Cloud Infrastructures More at Risk Than Ever From Expanded Attack Surfaces
QOMPLX Announces Post-Merger Board of Directors
Nokia Deepfield: DDoS Attacks Originate From Fewer Than 50 Hosting Companies
MITRE and Prelude Announce Partnership to Offer Advanced Cybersecurity for Small and Midsized Organizations
Netacea Creates Bot Management Open Source Framework
Immersive Labs Raises $75M to Accelerate Data Platform for Analyzing and Unlocking Cyber Skills Across Large Organizations
More Products & Releases
PR Newswire
Dark Reading Is Getting an Upgrade!

Find out more about our plans to improve the look, functionality, and performance of the Dark Reading site in the coming months.

11 Security Certifications to Seek Out This Summer
The more you know, the more you grow. The Edge takes a fresh look at leading security certifications that can help advance your career.
Is an Attacker Living Off Your Land?
Living-off-the-land attacks pose significant risks to organizations and, on top of that, are difficult to detect. Learn the basics about how these attacks operate and ways to limit their damage.
Register for Dark Reading Newsletters
Cartoon
White Papers
Current Issue
The State of Cybersecurity Incident Response
In this report learn how enterprises are building their incident response teams and processes, how they research potential compromises, how they respond to new breaches, and what tools and processes they use to remediate problems and improve their cyber defenses for the future.
Dark Reading - Bug Report
Bug Report
Enterprise Vulnerabilities
From DHS/US-CERT's National Vulnerability Database
CVE-2021-35196
PUBLISHED: 2021-06-21
** DISPUTED ** Manuskript through 0.12.0 allows remote attackers to execute arbitrary code via a crafted settings.pickle file in a project file, because there is insecure deserialization via the pickle.load() function in settings.py. NOTE: the vendor's position is that the product is not intended fo...
CVE-2010-1433
PUBLISHED: 2021-06-21
Joomla! Core is prone to a vulnerability that lets attackers upload arbitrary files because the application fails to properly verify user-supplied input. An attacker can exploit this vulnerability to upload arbitrary code and run it in the context of the webserver process. This may facilitate unauth...
CVE-2010-1434
PUBLISHED: 2021-06-21
Joomla! Core is prone to a session fixation vulnerability. An attacker may leverage this issue to hijack an arbitrary session and gain access to sensitive information, which may help in launching further attacks. Joomla! Core versions 1.5.x ranging from 1.5.0 and up to and including 1.5.15 are vulne...
CVE-2010-1435
PUBLISHED: 2021-06-21
Joomla! Core is prone to a security bypass vulnerability. Exploiting this issue may allow attackers to perform otherwise restricted actions and subsequently retrieve password reset tokens from the database through an already existing SQL injection vector. Joomla! Core versions 1.5.x ranging from 1.5...
CVE-2010-0413
PUBLISHED: 2021-06-21
** REJECT ** DO NOT USE THIS CANDIDATE NUMBER. ConsultIDs: none. Reason: This candidate was withdrawn by its CNA. Notes: none.
Flash Poll
Video
Slideshows
Twitter Feed