Database Security
Authentication
Privacy
Compliance
Identity & Access Management
Security Monitoring
Advanced Threats
Insider Threats
Vulnerability Management
7 Privacy Mistakes That Keep Security Pros on Their Toes
6 Serverless and Containerization Trends CISOs Should Track
Name that Toon: A Dog's Life
6 Ways to Beat Back BEC Attacks
How Intel Has Responded to Spectre and Meltdown
News & Commentary
PCI Council Releases New Software Framework for DevOps Era
Ericka Chickowski, Contributing Writer, Dark ReadingNews
The PCI Software Security Framework will eventually replace PCI DA-DSS when it expires in 2022.
By Ericka Chickowski Contributing Writer, Dark Reading, 1/18/2019
Comment0 comments  |  Read  |  Post a Comment
The Rx for HIPAA Compliance in the Cloud
Jason Polancich, CEO, MusubuCommentary
For medical entities, simply following HIPAA cloud service provider guidelines is no longer enough to ensure that your practice is protected from cyber threats, government investigations, and fines.
By Jason Polancich CEO, Musubu, 1/18/2019
Comment0 comments  |  Read  |  Post a Comment
8 Tips for Monitoring Cloud Security
Kelly Sheridan, Staff Editor, Dark Reading
Cloud security experts weigh in with the practices and tools they prefer to monitor and measure security metrics in the cloud.
By Kelly Sheridan Staff Editor, Dark Reading, 1/18/2019
Comment1 Comment  |  Read  |  Post a Comment
773 Million Email Addresses, 21 Million Passwords For Sale on Hacker Forum
Jai Vijayan, Freelance writerNews
Data appears to be from multiple breaches over past few years, says researcher who discovered it.
By Jai Vijayan Freelance writer, 1/17/2019
Comment1 Comment  |  Read  |  Post a Comment
Facebook Shuts Hundreds of Russia-Linked Pages, Accounts for Disinformation
Sara Peters, Senior Editor at Dark ReadingQuick Hits
Facebook says the accounts and pages were part of two unrelated disinformation operations aimed at targets outside the US.
By Sara Peters Senior Editor at Dark Reading, 1/17/2019
Comment1 Comment  |  Read  |  Post a Comment
Microsoft Launches New Azure DevOps Bug Bounty Program
Dark Reading Staff, Quick Hits
A new program will pay bounties of up to $20,000 for new critical bugs in the company's Azure DevOps systems and services.
By Dark Reading Staff , 1/17/2019
Comment0 comments  |  Read  |  Post a Comment
New Attacks Target Recent PHP Framework Vulnerability
Curtis Franklin Jr., Senior Editor at Dark ReadingNews
Multiple threat actors are using relatively simple techniques to take advantage of the vulnerability, launching cryptominers, skimmers, and other malware payloads.
By Curtis Franklin Jr. Senior Editor at Dark Reading, 1/17/2019
Comment0 comments  |  Read  |  Post a Comment
The Security Perimeter Is Dead; Long Live the New Endpoint Perimeter
Ofer Amitai, CEO, PortnoxCommentary
The network no longer provides an air gap against external threats, but access devices can take up the slack.
By Ofer Amitai CEO, Portnox, 1/17/2019
Comment2 comments  |  Read  |  Post a Comment
'We Want IoT Security Regulation,' Say 95% of IT Decision-Makers
Sara Peters, Senior Editor at Dark ReadingNews
New global survey shows businesses are valuing IoT security more highly, but they are still challenged by IoT data visibility and privacy.
By Sara Peters Senior Editor at Dark Reading, 1/17/2019
Comment0 comments  |  Read  |  Post a Comment
Simulating Lateral Attacks Through Email
Igal Gofman, Head of Security Research at XM CyberCommentary
A skilled attacker can get inside your company by abusing common email applications. Here are three strategies to block them.
By Igal Gofman Head of Security Research at XM Cyber, 1/17/2019
Comment0 comments  |  Read  |  Post a Comment
Malware Built to Hack Building Automation Systems
Kelly Jackson Higgins, Executive Editor at Dark ReadingNews
Researchers dig into vulnerabilities in popular building automation systems, devices.
By Kelly Jackson Higgins Executive Editor at Dark Reading, 1/16/2019
Comment1 Comment  |  Read  |  Post a Comment
Oklahoma Data Leak Compromises Years of FBI Data
Dark Reading Staff, Quick Hits
The Oklahoma Securities Commission accidentally leaked 3 TB of information, including data on years of FBI investigations.
By Dark Reading Staff , 1/16/2019
Comment0 comments  |  Read  |  Post a Comment
How the US Chooses Which Zero-Day Vulnerabilities to Stockpile
Ricardo Arroyo, Senior Technical Product Manager, Watchguard TechnologiesCommentary
When it comes to acceptable circumstances for government disclosure of zero-days, the new Vulnerabilities Equity Process might be the accountability practice security advocates have been waiting for.
By Ricardo Arroyo Senior Technical Product Manager, Watchguard Technologies, 1/16/2019
Comment1 Comment  |  Read  |  Post a Comment
BEC Groups Ramp Up Payroll Diversion Attacks
Jai Vijayan, Freelance writerNews
Criminals are increasingly trying to defraud businesses by diverting payrolls of CEOs, other senior executives, Agari says.
By Jai Vijayan Freelance writer, 1/16/2019
Comment0 comments  |  Read  |  Post a Comment
Fortnite Players Compromised Via Epic Games Vulnerability
Kelly Sheridan, Staff Editor, Dark ReadingNews
Bugs in Epic Games' platform could let intruders take over players' accounts, view personal data, and/or buy in-game currency.
By Kelly Sheridan Staff Editor, Dark Reading, 1/16/2019
Comment1 Comment  |  Read  |  Post a Comment
Are You Listening to Your Kill Chain?
Ben Haley, SVP Engineering at HOPZERO SecurityCommentary
With the right tools and trained staff, any organization should be able to deal with threats before information is compromised.
By Ben Haley SVP Engineering at HOPZERO Security, 1/16/2019
Comment0 comments  |  Read  |  Post a Comment
Triton/Trisis Attack Was More Widespread Than Publicly Known
Kelly Jackson Higgins, Executive Editor at Dark ReadingNews
Signs of the attack first showed up two months before it was identified as a cyberattack, but they were mistaken for a pure equipment failure by Schneider Electric, security expert reveals at S4x19.
By Kelly Jackson Higgins Executive Editor at Dark Reading, 1/16/2019
Comment0 comments  |  Read  |  Post a Comment
Hijacking a PLC Using its Own Network Features
Kelly Jackson Higgins, Executive Editor at Dark ReadingNews
Researcher at S4x19 to show how attackers can exploit the built-in advanced connectivity functions in some Rockwell PLCs.
By Kelly Jackson Higgins Executive Editor at Dark Reading, 1/15/2019
Comment0 comments  |  Read  |  Post a Comment
Report: Bots Add Volume to Account Takeover Attacks
Dark Reading Staff, Quick Hits
Bots that can launch hundreds of attacks per second are making account takeover fraud more difficult to defend against.
By Dark Reading Staff , 1/15/2019
Comment1 Comment  |  Read  |  Post a Comment
Online Fraud: Now a Major Application Layer Security Problem
Ting-Fang Yen, Research Scientist, DataVisor, Inc.Commentary
The explosion of consumer-facing online services and applications is making it easier and cheaper for cybercriminals to host malicious content and launch attacks.
By Ting-Fang Yen Research Scientist, DataVisor, Inc., 1/15/2019
Comment0 comments  |  Read  |  Post a Comment
More Stories
Current Conversations
More Conversations
Products & Releases
Syncsort Survey Finds Disconnect Between Confidence in IT Security Programs and Data Breaches
61% of Organizations Say They Have Either Had a Breach or Aren’t Sure
Trend Micro Rolls Out IoT Security 2.0
FireEye Updates Email Security with New Threat Detection and Evasion Defenses Based on Insights from the Front Lines
Nuspire Launches Managed Detection And Response Solution With Three Detection And Response Services
Criminal Charges Filed in Los Angeles and Alaska in Conjunction with Seizures Of 15 Websites Offering DDoS-For-Hire Services
Harris Poll Reveals American Attitudes Towards Cybersecurity and Privacy
Don Cardinal Named Head of Financial Data Exchange
More Products & Releases
PR Newswire
Government Shutdown Brings Certificate Lapse Woes
Curtis Franklin Jr., Senior Editor at Dark Reading,  1/11/2019
Register for Dark Reading Newsletters
Cartoon Contest
White Papers
Current Issue
The Year in Security 2018
This Dark Reading Tech Digest explores the biggest news stories of 2018 that shaped the cybersecurity landscape.
Dark Reading - Bug Report
Bug Report
Enterprise Vulnerabilities
From DHS/US-CERT's National Vulnerability Database
CVE-2019-6487
PUBLISHED: 2019-01-18
TP-Link WDR Series devices through firmware v3 (such as TL-WDR5620 V3.0) are affected by command injection (after login) leading to remote code execution, because shell metacharacters can be included in the weather get_weather_observe citycode field.
CVE-2018-20735
PUBLISHED: 2019-01-17
** DISPUTED ** An issue was discovered in BMC PATROL Agent through 11.3.01. It was found that the PatrolCli application can allow for lateral movement and escalation of privilege inside a Windows Active Directory environment. It was found that by default the PatrolCli / PATROL Agent application only...
CVE-2019-0624
PUBLISHED: 2019-01-17
A spoofing vulnerability exists when a Skype for Business 2015 server does not properly sanitize a specially crafted request, aka "Skype for Business 2015 Spoofing Vulnerability." This affects Skype.
CVE-2019-0646
PUBLISHED: 2019-01-17
A Cross-site Scripting (XSS) vulnerability exists when Team Foundation Server does not properly sanitize user provided input, aka "Team Foundation Server Cross-site Scripting Vulnerability." This affects Team.
CVE-2019-0647
PUBLISHED: 2019-01-17
An information disclosure vulnerability exists when Team Foundation Server does not properly handle variables marked as secret, aka "Team Foundation Server Information Disclosure Vulnerability." This affects Team.
How Enterprises Are Attacking the Cybersecurity Problem
How Enterprises Are Attacking the Cybersecurity Problem
Data breach fears and the need to comply with regulations such as GDPR are two major drivers increased spending on security products and technologies. But other factors are contributing to the trend as well. Find out more about how enterprises are attacking the cybersecurity problem by reading our report today.
Flash Poll
Video
Slideshows
Twitter Feed