Dark Reading is part of the Informa Tech Division of Informa PLC

This site is operated by a business or businesses owned by Informa PLC and all copyright resides with them.Informa PLC's registered office is 5 Howick Place, London SW1P 1WG. Registered in England and Wales. Number 8860726.

Database Security
Authentication
Mobile
Privacy
Compliance
Careers and People
Identity & Access Management
Security Monitoring
Advanced Threats
Insider Threats
Vulnerability Management
The CISO Life Is Half as Good
8 Security & Privacy Apps to Share With Family and Friends
Global Dwell Time Drops as Ransomware Attacks Accelerate
5 Objectives for Establishing an API-First Security Strategy
News & Commentary
Supernova Malware Actors Masqueraded as Remote Workers to Access Breached Network
Jai Vijayan, Contributing WriterNews
China-based Spiral group is believed to be behind year-long attack, which exploited a flaw in SolarWinds Orion technology to drop a Web shell.
By Jai Vijayan Contributing Writer, 4/22/2021
Comment0 comments  |  Read  |  Post a Comment
The Edge Pro Tip: Brush Up on Web Shells
Edge Editors, Dark Reading
While neither new nor novel, Web shells are making an impact with a surge of Exchange attacks.
By Edge Editors Dark Reading, 4/22/2021
Comment0 comments  |  Read  |  Post a Comment
New CISA Advisories Warn of ICS Vulnerabilities
Dark Reading Staff, Quick Hits
The vulnerabilities exist in Cscape control system application programming software and the Mitsubishi Electric GOT.
By Dark Reading Staff , 4/22/2021
Comment1 Comment  |  Read  |  Post a Comment
Prometei Botnet Adds New Twist to Exchange Server Attacks
Dark Reading Staff, Quick Hits
Attackers are using the well-known Microsoft Exchange Server flaw to add machines to a cryptocurrency botnet, researchers say.
By Dark Reading Staff , 4/22/2021
Comment0 comments  |  Read  |  Post a Comment
Improving the Vulnerability Reporting Process With 5 Steps
Bas Alberts, Principal Security Researcher, GitHub Security LabCommentary
Follow these tips for an effective and positive experience for both the maintainer and external vulnerability reporter.
By Bas Alberts Principal Security Researcher, GitHub Security Lab, 4/22/2021
Comment0 comments  |  Read  |  Post a Comment
University Suspends Project After Researchers Submitted Vulnerable Linux Patches
Robert Lemos, Contributing WriterNews
A Linux maintainer pledges to stop taking code submissions from the University of Minnesota after a research team purposely submitted vulnerabilities to show software supply chain weaknesses.
By Robert Lemos Contributing Writer, 4/22/2021
Comment0 comments  |  Read  |  Post a Comment
Name That Toon: Greetings, Earthlings
John Klossner, CartoonistCommentary
Caption time! Come up with something out of this world for Dark Reading's latest contest, and our panel of experts will reward the winner with a $25 Amazon gift card.
By John Klossner Cartoonist, 4/22/2021
Comment13 comments  |  Read  |  Post a Comment
Looking for Greater Security Culture? Ask an 8-Bit Plumber
Rick van Galen, Security Engineer, 1PasswordCommentary
After 40 years of navigating catastrophes, video game character Mario can help us with a more intelligent approach to DevOps and improving security culture.
By Rick van Galen Security Engineer, 1Password, 4/22/2021
Comment0 comments  |  Read  |  Post a Comment
10 Free Security Tools at Black Hat Asia 2021
Jai Vijayan, Contributing Writer
Researchers are set to demonstrate a plethora of tools for conducting pen tests, vulnerability assessments, data forensics, and a wide range of other use cases.
By Jai Vijayan Contributing Writer, 4/22/2021
Comment0 comments  |  Read  |  Post a Comment
Nearly Half of All Malware Is Concealed in TLS-Encrypted Communications
Jai Vijayan, Contributing WriterNews
Forty-six percent of all malware uses the cryptographic protocol to evade detection, communicate with attacker-controlled servers, and to exfiltrate data, new study shows.
By Jai Vijayan Contributing Writer, 4/22/2021
Comment0 comments  |  Read  |  Post a Comment
Who's Your Login?
Edge Editors, Dark Reading
If only Abbott and Costello were around today.
By Edge Editors Dark Reading, 4/22/2021
Comment0 comments  |  Read  |  Post a Comment
Rapid7 Acquires Velociraptor Open Source Project
Dark Reading Staff, Quick Hits
The company plans to use Velociraptor's technology and insights to build out its own incident response capabilities.
By Dark Reading Staff , 4/21/2021
Comment0 comments  |  Read  |  Post a Comment
Justice Dept. Creates Task Force to Stop Ransomware Spread
Dark Reading Staff, Quick Hits
One goal of the group is to take down the criminal ecosystem that enables ransomware, officials say.
By Dark Reading Staff , 4/21/2021
Comment0 comments  |  Read  |  Post a Comment
Zero-Day Flaws in SonicWall Email Security Tool Under Attack
Kelly Sheridan, Staff Editor, Dark ReadingNews
Three zero-day vulnerabilities helped an attacker install a backdoor, access files and emails, and move laterally into a target network.
By Kelly Sheridan Staff Editor, Dark Reading, 4/21/2021
Comment0 comments  |  Read  |  Post a Comment
Business Email Compromise Costs Businesses More Than Ransomware
Charlie Winckless, Senior Director, Cybersecurity Solutions, at PresidioCommentary
Ransomware gets the headlines, but business paid out $1.8 billion last year to resolve BEC issues, according to an FBI report.
By Charlie Winckless Senior Director, Cybersecurity Solutions, at Presidio, 4/21/2021
Comment0 comments  |  Read  |  Post a Comment
How to Attack Yourself Better in 2021
Pavel Suprunyuk, Technical lead of the audit and consulting team, Group-IBCommentary
Social engineering pen testing is just one step in preventing employees from falling victim to cybercriminals.
By Pavel Suprunyuk Technical lead of the audit and consulting team, Group-IB, 4/21/2021
Comment0 comments  |  Read  |  Post a Comment
Attackers Heavily Targeting VPN Vulnerabilities
Jai Vijayan, Contributing WriterNews
Threat actors like attacking the technology because they provide a convenient entry point to enterprise networks.
By Jai Vijayan Contributing Writer, 4/21/2021
Comment0 comments  |  Read  |  Post a Comment
Pulse Secure VPN Flaws Exploited to Target US Defense Sector
Kelly Sheridan, Staff Editor, Dark ReadingNews
China-linked attackers have used vulnerabilities in the Pulse Secure VPN appliance to attack US Defense Industrial Base networks.
By Kelly Sheridan Staff Editor, Dark Reading, 4/20/2021
Comment0 comments  |  Read  |  Post a Comment
Foreign Spies Target British Nationals With Fake Social Media Profiles
Dark Reading Staff, Quick Hits
British security agency MI5 has launched a new education campaign to warn potential victims of the attacks.
By Dark Reading Staff , 4/20/2021
Comment0 comments  |  Read  |  Post a Comment
Attackers Compromised Code-Checking Vendor's Tool for Two Months
Robert Lemos, Contributing WriterNews
A script used to upload sensitive reports—with access to credentials and datastores—likely sent information on hundreds, possibly thousands, of companies to attackers.
By Robert Lemos Contributing Writer, 4/20/2021
Comment0 comments  |  Read  |  Post a Comment
More Stories
Current Conversations
More Conversations
Products & Releases
Deep Instinct Receives $100 Million in Series D Funding
TeamViewer Survey: Businesses Prepare for Post-Pandemic 'Hybrid' Workforce with New Policies, Tech Infrastructure
Trend Micro Revamps Partner Program
Mimecast Report: 61% of Organizations Were Infected with Ransomware in 2020
Netacea Releases "Buying Bad Bots Wholesale: The Genesis Market" Report
Mandiant Advantage Expands SaaS platform with New Mandiant Automated Defense Module
Former Google Security Execs Join Red Canary
Cynet Activates Competitive Replacement Program for Customers Migrating to Cynet 360 XDR Platform
More Products & Releases
PR Newswire
Dark Reading Is Getting an Upgrade!

Find out more about our plans to improve the look, functionality, and performance of the Dark Reading site in the coming months.

7 Old IT Things Every New InfoSec Pro Should Know
Beneath all those containers and IoT devices, there's a rich patchwork of gear, protocols, and guidelines that have been holding it together since before you were born. Knowledge of those fundamentals is growing more valuable, not less.
How to Create an Incident Response Plan From the Ground Up
Security 101: In the wake of an incident, it's important to cover all your bases -- and treat your IR plan as a constantly evolving work in progress.
The CISO Life Is Half as Good
Lora Vaughn was at a crossroads -- and that was before mandated pandemic lockdowns came into play. Here's her story of how life got sweeter after she stepped away from the CISO job.
Register for Dark Reading Newsletters
Cartoon Contest
Write a Caption, Win an Amazon Gift Card! Click Here
Latest Comment: "Elon, I think our cover's been blown."
White Papers
Current Issue
2021 Top Enterprise IT Trends
We've identified the key trends that are poised to impact the IT landscape in 2021. Find out why they're important and how they will affect you today!
Dark Reading - Bug Report
Bug Report
Enterprise Vulnerabilities
From DHS/US-CERT's National Vulnerability Database
CVE-2021-31607
PUBLISHED: 2021-04-23
In SaltStack Salt 2016.9 through 3002.6, a command injection vulnerability exists in the snapper module that allows for local privilege escalation on a minion. The attack requires that a file is created with a pathname that is backed up by snapper, and that the master calls the snapper.diff function...
CVE-2021-31597
PUBLISHED: 2021-04-23
The xmlhttprequest-ssl package before 1.6.1 for Node.js disables SSL certificate validation by default, because rejectUnauthorized (when the property exists but is undefined) is considered to be false within the https.request function of Node.js. In other words, no certificate is ever rejected.
CVE-2021-2296
PUBLISHED: 2021-04-22
Vulnerability in the Oracle VM VirtualBox product of Oracle Virtualization (component: Core). The supported version that is affected is Prior to 6.1.20. Difficult to exploit vulnerability allows high privileged attacker with logon to the infrastructure where Oracle VM VirtualBox executes to compromi...
CVE-2021-2297
PUBLISHED: 2021-04-22
Vulnerability in the Oracle VM VirtualBox product of Oracle Virtualization (component: Core). The supported version that is affected is Prior to 6.1.20. Difficult to exploit vulnerability allows high privileged attacker with logon to the infrastructure where Oracle VM VirtualBox executes to compromi...
CVE-2021-2298
PUBLISHED: 2021-04-22
Vulnerability in the MySQL Server product of Oracle MySQL (component: Server: Optimizer). Supported versions that are affected are 8.0.23 and prior. Easily exploitable vulnerability allows low privileged attacker with network access via multiple protocols to compromise MySQL Server. Successful attac...
Flash Poll
Video
Slideshows
Twitter Feed