Dark Reading is part of the Informa Tech Division of Informa PLC

This site is operated by a business or businesses owned by Informa PLC and all copyright resides with them.Informa PLC's registered office is 5 Howick Place, London SW1P 1WG. Registered in England and Wales. Number 8860726.

Database Security
Authentication
Mobile
Privacy
Compliance
Identity & Access Management
Security Monitoring
Advanced Threats
Insider Threats
Vulnerability Management
7 Hot Cybersecurity Trends to Be Highlighted at Black Hat
Back to Basics with Log Management, SIEMs & MSSPs
10 Ways to Keep a Rogue RasPi From Wrecking Your Network
Name That Toon: Beat the Heat
To Pay or Not To Pay? That Is the (Ransomware) Question
News & Commentary
Software Developers Face Secure Coding Challenges
Robert Lemos, Contributing WriterNews
Seven in ten developers are expected to write secure code, but less than half receive feedback on security, a survey finds.
By Robert Lemos Contributing Writer, 7/15/2019
Comment0 comments  |  Read  |  Post a Comment
18% of Enterprises Holding Back on Windows 10 Upgrade
Dark Reading Staff, Quick Hits
Microsoft will officially end support for Windows 7 on January 14, 2020. Many large businesses aren't ready.
By Dark Reading Staff , 7/15/2019
Comment0 comments  |  Read  |  Post a Comment
Is Machine Learning the Future of Cloud-Native Security?
Pawan Shankar, Senior Security Product Marketing Manager at SysdigCommentary
The nature of containers and microservices makes them harder to protect. Machine learning might be the answer going forward.
By Pawan Shankar Senior Security Product Marketing Manager at Sysdig, 7/15/2019
Comment0 comments  |  Read  |  Post a Comment
Where Businesses Waste Endpoint Security Budgets
Kelly Sheridan, Staff Editor, Dark Reading
Too many systems, failure to test tools, and fear of replacement drive endpoint complexity and render products less effective.
By Kelly Sheridan Staff Editor, Dark Reading, 7/15/2019
Comment1 Comment  |  Read  |  Post a Comment
German Schools Ban Office 365, Cite Privacy Concerns
Dark Reading Staff, Quick Hits
The ruling follows years of debate over whether German schools and institutions should use Microsoft tools and services.
By Dark Reading Staff , 7/12/2019
Comment1 Comment  |  Read  |  Post a Comment
Competing Priorities Mean Security Risks for Small Businesses
Dark Reading Staff, Quick Hits
Small business IT professionals are trying to balance multiple priorities and finding that the balance often leaves the company with serious security risks.
By Dark Reading Staff , 7/12/2019
Comment2 comments  |  Read  |  Post a Comment
A Lawyer’s Guide to Cyber Insurance: 4 Basic Tips
Beth Burgin Waller, Chair, Cybersecurity & Data Privacy Practice , Woods Rogers PLCCommentary
The time to read the fine print in your cybersecurity insurance policy is before you sign on the dotted line.
By Beth Burgin Waller Chair, Cybersecurity & Data Privacy Practice , Woods Rogers PLC, 7/12/2019
Comment1 Comment  |  Read  |  Post a Comment
Data Center Changes Push Cyber Risk to Network's Edge
Curtis Franklin Jr., Senior Editor at Dark ReadingNews
Changes in fundamental enterprise architectures coupled with shifts in human resources mean that companies are considering new risks to their infrastructure.
By Curtis Franklin Jr. Senior Editor at Dark Reading, 7/11/2019
Comment1 Comment  |  Read  |  Post a Comment
APT Groups Make Quadruple What They Spend on Attack Tools
Jai Vijayan, Contributing WriterNews
Some advanced persistent threat actors can spend north of $1 million on attacks, but the return on that investment can be huge.
By Jai Vijayan Contributing Writer, 7/11/2019
Comment0 comments  |  Read  |  Post a Comment
How to Catch a Phish: Where Employee Awareness Falls Short
Kelly Sheridan, Staff Editor, Dark ReadingNews
Advanced phishing techniques and poor user behaviors that exacerbate the threat of successful attacks.
By Kelly Sheridan Staff Editor, Dark Reading, 7/11/2019
Comment0 comments  |  Read  |  Post a Comment
Software Engineer Charged for Taking Stolen Trade Secrets to China
Dark Reading Staff, Quick Hits
Xudong Yao reportedly stole proprietary information from his employer and brought it to China, where he is believed to currently reside.
By Dark Reading Staff , 7/11/2019
Comment1 Comment  |  Read  |  Post a Comment
Most Organizations Lack Cyber Resilience
Marc Wilczek, Digital Strategist & CIO AdvisorCommentary
Despite increasing threats, many organizations continue to run with only token cybersecurity and resilience.
By Marc Wilczek Digital Strategist & CIO Advisor, 7/11/2019
Comment0 comments  |  Read  |  Post a Comment
Monroe College Hit with Ransomware Attack
Dark Reading Staff, Quick Hits
All campuses are affected, with attackers demanding $2 million in Bitcoin in exchange for decryption keys.
By Dark Reading Staff , 7/11/2019
Comment0 comments  |  Read  |  Post a Comment
Summer: A Time for Vacations & Cyberattacks?
Robert Lemos, Contributing WriterNews
About a third of cybersecurity professionals believe that their companies see more cyberattacks during the summer, but the survey data does not convince on the reasons for the perception of a summer bump.
By Robert Lemos Contributing Writer, 7/11/2019
Comment1 Comment  |  Read  |  Post a Comment
The Security of Cloud Applications
Hillel Solow, CTO and Co-founder, ProtegoCommentary
Despite the great success of the cloud over the last decade, misconceptions continue to persist. Here's why the naysayers are wrong.
By Hillel Solow CTO and Co-founder, Protego, 7/11/2019
Comment4 comments  |  Read  |  Post a Comment
Persistent Threats Can Last Inside SMB Networks for Years
Steve Zurier, Contributing WriterNews
The average dwell time for riskware can be as much as 869 days.
By Steve Zurier Contributing Writer, 7/11/2019
Comment0 comments  |  Read  |  Post a Comment
Industry Insight: Checking Up on Healthcare Security
Kelly Sheridan, Staff Editor, Dark ReadingNews
Modern threats putting healthcare organization at risk, how they're improving their security posture, and where many fall short.
By Kelly Sheridan Staff Editor, Dark Reading, 7/10/2019
Comment0 comments  |  Read  |  Post a Comment
Financial Firms Face Threats from Employee Mobile Devices
Curtis Franklin Jr., Senior Editor at Dark ReadingNews
A new report says that phishing and man-in-the-middle attacks are major risks to financial institutions - via mobile devices in the hands of their employees.
By Curtis Franklin Jr. Senior Editor at Dark Reading, 7/10/2019
Comment1 Comment  |  Read  |  Post a Comment
New Ransomware Targets QNAP's Network-Attached Storage Devices
Jai Vijayan, Contributing WriterNews
More than 19,000 systems in the US are potentially at risk from eCh0raix.
By Jai Vijayan Contributing Writer, 7/10/2019
Comment0 comments  |  Read  |  Post a Comment
Why You Need a Global View of IT Assets
Pablo Quiroga, Director of Product Management at QualysCommentary
It may seem obvious, but many companies lose sight of the fact that they can't protect what they don't know they even have.
By Pablo Quiroga Director of Product Management at Qualys, 7/10/2019
Comment1 Comment  |  Read  |  Post a Comment
More Stories
Current Conversations
More Conversations
Products & Releases
Dragos Appoints CrowdStrike Cofounder and CTO Dmitri Alperovitch to Board of Directors
YL Ventures Closes Fourth Fund with $120M of Committed Capital
Digital Shadows Raises $10M Strategic Investment Round Led by National Australia Bank Ventures
Internet Isolation Vendor Menlo Security Raises $75 Million in Series D Funding
Sandia Researchers Uncover Personalized Medicine Software Vulnerability
Kaspersky Helps Eliminate Critical Vulnerabilities in Smart Home Controller
Global Cyber Alliance And Center For Internet Security Launch Free Cybersecurity Toolkit for States And Local Election Offices
Expel Announces $40 Million in Series C Funding
More Products & Releases
PR Newswire
sponsored by alkamai

The latest on the number of attacks, types of attacks, and threats to enterprises' most critical IT infrastructure.
Register for Dark Reading Newsletters
Cartoon Contest
Write a Caption, Win a Starbucks Card! Click Here
Latest Comment: Planned vacation simulation
White Papers
Current Issue
Building and Managing an IT Security Operations Program
As cyber threats grow, many organizations are building security operations centers (SOCs) to improve their defenses. In this Tech Digest you will learn tips on how to get the most out of a SOC in your organization - and what to do if you can't afford to build one.
Dark Reading - Bug Report
Bug Report
Enterprise Vulnerabilities
From DHS/US-CERT's National Vulnerability Database
CVE-2019-10100
PUBLISHED: 2019-07-15
couchcms 2 is affected by: Web Site physical path leakage. The impact is: disclosure the full path. The component is: includes/mysql2i/mysql2i.func.php and addons/phpmailer/phpmailer.php. The attack vector is: network connectivity.
CVE-2019-10100
PUBLISHED: 2019-07-15
borg-reducer c6d5240 is affected by: Buffer Overflow. The impact is: Possible code execution and denial of service. The component is: Output parameter within the executable.
CVE-2019-10103
PUBLISHED: 2019-07-15
Saleor Issue was introduced by merge commit: e1b01bad0703afd08d297ed3f1f472248312cc9c. This commit was released as part of 2.0.0 release is affected by: Incorrect Access Control. The impact is: Important. The component is: ProductVariant type in GraphQL API. The attack vector is: Unauthenticated use...
CVE-2019-10103
PUBLISHED: 2019-07-15
libmspack 0.9.1alpha is affected by: Buffer Overflow. The impact is: Information Disclosure. The component is: function chmd_read_headers() in libmspack(file libmspack/mspack/chmd.c). The attack vector is: the victim must open a specially crafted chm file. The fixed version is: after commit 2f084136...
CVE-2019-10103
PUBLISHED: 2019-07-15
Slanger 0.6.0 is affected by: Remote Code Execution (RCE). The impact is: A remote attacker can execute arbitrary commands by sending a crafted request to the server. The component is: Message handler & request validator. The attack vector is: Remote unauthenticated. The fixed version is: after ...
The State of IT Operations and Cybersecurity Operations
The State of IT Operations and Cybersecurity Operations
Your enterprise's cyber risk may depend upon the relationship between the IT team and the security team. Here’s some insight on what's working – and what isn't – in the data center.
Flash Poll
Video
Slideshows
Twitter Feed