Dark Reading is part of the Informa Tech Division of Informa PLC

This site is operated by a business or businesses owned by Informa PLC and all copyright resides with them.Informa PLC's registered office is 5 Howick Place, London SW1P 1WG. Registered in England and Wales. Number 8860726.

Comments
Threat Intelligence Platforms: The Next 'Must-Have' For Harried Security Operations Teams
Newest First  |  Oldest First  |  Threaded View
RedTigerLabs
RedTigerLabs,
User Rank: Apprentice
6/6/2015 | 9:25:49 AM
Threat Modeling without Compliance goals or Remediation is only "Art"
Visualization of threat information is a great first step. Toolsets need to build this information into resilience objectives that align with standards and policy objectives. This toolset, built into redtigerlabs dot com, was designed specifically for SCADA and Crtitical Infrastructure, where this information is needed most. 
Cory-C
Cory-C,
User Rank: Apprentice
6/4/2015 | 11:22:02 AM
Standards for federating threat intelligence information

As suggested in this article, federation across the many sources, platforms and tools for threat information is essential to understand and respond to the sophisticated threats we face today. We need to understand all threats and all hazards across all sources, particularly where cyber and physical come together. While startups can help, emerging standards are the key. There is an ongoing standards effort in the Object Management Group (OMG) to define a federating model such that tools that implement this standard will be able to federate, analize and exchange information in a variety of formats and technologies. CSOs and threat intelligence vendors may want to engage in this standard top make sure it meets the needs of the community. More information can be found on threatrisk dot org.



Edge-DRsplash-10-edge-articles
I Smell a RAT! New Cybersecurity Threats for the Crypto Industry
David Trepp, Partner, IT Assurance with accounting and advisory firm BPM LLP,  7/9/2021
News
Attacks on Kaseya Servers Led to Ransomware in Less Than 2 Hours
Robert Lemos, Contributing Writer,  7/7/2021
Commentary
It's in the Game (but It Shouldn't Be)
Tal Memran, Cybersecurity Expert, CYE,  7/9/2021
Register for Dark Reading Newsletters
White Papers
Video
Cartoon
Current Issue
The Promise and Reality of Cloud Security
Cloud security has been part of the cybersecurity conversation for years but has been on the sidelines for most enterprises. The shift to remote work during the COVID-19 pandemic and digital transformation projects have moved cloud infrastructure front-and-center as enterprises address the associated security risks. This report - a compilation of cutting-edge Black Hat research, in-depth Omdia analysis, and comprehensive Dark Reading reporting - explores how cloud security is rapidly evolving.
Flash Poll
Twitter Feed
Dark Reading - Bug Report
Bug Report
Enterprise Vulnerabilities
From DHS/US-CERT's National Vulnerability Database
CVE-2022-43762
PUBLISHED: 2023-02-08
Lack of verification in B&R APROL Tbase server versions < R 4.2-07 may lead to memory leaks when receiving messages
CVE-2022-43763
PUBLISHED: 2023-02-08
Insufficient check of preconditions could lead to Denial of Service conditions when calling commands on the Tbase server of B&R APROL versions < R 4.2-07.
CVE-2022-43764
PUBLISHED: 2023-02-08
Insufficient validation of input parameters when changing configuration on Tbase server in B&R APROL versions < R 4.2-07 could result in buffer overflow. This may lead to Denial-of-Service conditions or execution of arbitrary code.
CVE-2022-43765
PUBLISHED: 2023-02-08
B&R APROL versions < R 4.2-07 doesn’t process correctly specially formatted data packages sent to port 55502/tcp, which may allow a network based attacker to cause an application Denial-of-Service.
CVE-2022-2094
PUBLISHED: 2023-02-08
The Yellow Yard Searchbar WordPress plugin before 2.8.2 does not escape some URL parameters before outputting them back to the user, leading to Reflected Cross-Site Scripting