Dark Reading is part of the Informa Tech Division of Informa PLC

This site is operated by a business or businesses owned by Informa PLC and all copyright resides with them.Informa PLC's registered office is 5 Howick Place, London SW1P 1WG. Registered in England and Wales. Number 8860726.

Comments
PCI Update Paves Way For Expanding Point-to-Point Encryption
Newest First  |  Oldest First  |  Threaded View
Some Guy
50%
50%
Some Guy,
User Rank: Moderator
7/2/2015 | 2:47:41 PM
It's an Arms Race .. How you can help
We can decry the inevitability of attacks, but what we can't do is accept that as the norm. It's an Arms Race; the next step is here; waiting to do nothing until a perfect solution presents itself is to commit a nirvana fallacy.

Here's where YOU can make a difference. On November 1st, if your credit card hasn't been updated to PIN & Chip (EMV) technology, vote with your pocketbook and move your credit so somewhere that does.
iNtHEmACHINE
50%
50%
iNtHEmACHINE,
User Rank: Apprentice
7/2/2015 | 12:16:09 PM
Re: Okay but...
"Low hanging fruit is the name of the game with hackers that are trying to make money from it."

Low hanging or stumbled apon is where the huge hacks have been, but money is the name of the game even if it's just a Nigerian scam or a few million numbers with expiration dates. Easy money is better, but money is money. If it's MY money I expect it to be secured.

"Good security only really attracts the security curious out there"

And making it harder does make it harder. What is security curious? <heh>

 
Whoopty
50%
50%
Whoopty,
User Rank: Ninja
7/2/2015 | 5:00:04 AM
Re: Okay but...
I know what you mean. It can make you feel a bit dispondent about security with how easy it often seems to bypass it. As long as it's difficult though, it should be relatively safe. Low hanging fruit is the name of the game with hackers that are trying to make money from it. Good security only really attracts the security curious out there. 
Blog Voyage
100%
0%
Blog Voyage,
User Rank: Strategist
7/2/2015 | 2:52:40 AM
Okay but...
"The goal is to make it harder for attackers to steal card data using POS malware tools like BlackPOS, Dexter, vSkimmer, and Backoff." Sure it will help, but hackers always have an advantage.


COVID-19: Latest Security News & Commentary
Dark Reading Staff 7/14/2020
Omdia Research Launches Page on Dark Reading
Tim Wilson, Editor in Chief, Dark Reading 7/9/2020
Why Cybersecurity's Silence Matters to Black Lives
Tiffany Ricks, CEO, HacWare,  7/8/2020
Register for Dark Reading Newsletters
White Papers
Video
Cartoon
Current Issue
Special Report: Computing's New Normal, a Dark Reading Perspective
This special report examines how IT security organizations have adapted to the "new normal" of computing and what the long-term effects will be. Read it and get a unique set of perspectives on issues ranging from new threats & vulnerabilities as a result of remote working to how enterprise security strategy will be affected long term.
Flash Poll
The Threat from the Internetand What Your Organization Can Do About It
The Threat from the Internetand What Your Organization Can Do About It
This report describes some of the latest attacks and threats emanating from the Internet, as well as advice and tips on how your organization can mitigate those threats before they affect your business. Download it today!
Twitter Feed
Dark Reading - Bug Report
Bug Report
Enterprise Vulnerabilities
From DHS/US-CERT's National Vulnerability Database
CVE-2020-1448
PUBLISHED: 2020-07-14
A remote code execution vulnerability exists in Microsoft Word software when it fails to properly handle objects in memory, aka 'Microsoft Word Remote Code Execution Vulnerability'. This CVE ID is unique from CVE-2020-1446, CVE-2020-1447.
CVE-2020-1449
PUBLISHED: 2020-07-14
A remote code execution vulnerability exists in Microsoft Project software when the software fails to check the source markup of a file, aka 'Microsoft Project Remote Code Execution Vulnerability'.
CVE-2020-1450
PUBLISHED: 2020-07-14
A cross-site-scripting (XSS) vulnerability exists when Microsoft SharePoint Server does not properly sanitize a specially crafted web request to an affected SharePoint server, aka 'Microsoft Office SharePoint XSS Vulnerability'. This CVE ID is unique from CVE-2020-1451, CVE-2020-1456.
CVE-2020-1451
PUBLISHED: 2020-07-14
A cross-site-scripting (XSS) vulnerability exists when Microsoft SharePoint Server does not properly sanitize a specially crafted web request to an affected SharePoint server, aka 'Microsoft Office SharePoint XSS Vulnerability'. This CVE ID is unique from CVE-2020-1450, CVE-2020-1456.
CVE-2020-1454
PUBLISHED: 2020-07-14
This vulnerability is caused when SharePoint Server does not properly sanitize a specially crafted request to an affected SharePoint server.An authenticated attacker could exploit this vulnerability by sending a specially crafted request to an affected SharePoint server, aka 'Microsoft SharePoint Re...