Dark Reading is part of the Informa Tech Division of Informa PLC

This site is operated by a business or businesses owned by Informa PLC and all copyright resides with them.Informa PLC's registered office is 5 Howick Place, London SW1P 1WG. Registered in England and Wales. Number 8860726.

Comments
Name That Toon: Naughty or Nice
Newest First  |  Oldest First  |  Threaded View
<<   <   Page 3 / 11   >   >>
andgeny
50%
50%
andgeny,
User Rank: Apprentice
12/28/2016 | 2:13:07 AM
Even Santa Drinks Starbucks
Even Santa Drinks Starbucks
Joe Stanganelli
100%
0%
Joe Stanganelli,
User Rank: Ninja
12/24/2016 | 6:57:34 PM
and another
"Hey, do you know who ate all the cookies in the break room?"
Joe Stanganelli
0%
100%
Joe Stanganelli,
User Rank: Ninja
12/24/2016 | 6:54:32 PM
another
"They brought him in to do end-of-year performance reviews.  His specialty is figuring out if you've been bad or good."
KarthikS698
50%
50%
KarthikS698,
User Rank: Apprentice
12/23/2016 | 11:32:23 PM
Re: Pending Review
Digital Santa
YamBag
50%
50%
YamBag,
User Rank: Apprentice
12/23/2016 | 2:55:32 AM
The Naughty Programmer
Susan stared at her boss in shock over the news it was their last day due to departmental outsourcing. Larry, having had a heads up decided to dress for his next gig. Eddy, the naughtiest of the bunch, puts the finishing touches on his logic bomb.
Airs2016
100%
0%
Airs2016,
User Rank: Apprentice
12/21/2016 | 7:41:56 PM
Naughty or nice
" He always dresses like that when he's conducting our performance reviews..."
bdmeyer
50%
50%
bdmeyer,
User Rank: Apprentice
12/21/2016 | 12:39:55 PM
Visit from HR
All he knows is naughty, or nice. I can't work with such a closed minded clause.
WilliamSlater
67%
33%
WilliamSlater,
User Rank: Strategist
12/21/2016 | 11:24:40 AM
Santa and the NSA
Wow!  These NSA Surveillance Programs make it easier than ever to see who's Naughty & Nice.  Ho! Ho! Ho! Thanks, NSA!
tomrb08
50%
50%
tomrb08,
User Rank: Strategist
12/21/2016 | 10:26:18 AM
Making his list....using IoT hacking.
"We finally figured out who was behind all the IoT device hacking..."
WilliamG441
100%
0%
WilliamG441,
User Rank: Apprentice
12/19/2016 | 9:15:44 AM
Naughty or Nice
He's testing 3D printing.  The elves are worried.
<<   <   Page 3 / 11   >   >>


Register for Dark Reading Newsletters
White Papers
Video
Cartoon Contest
Current Issue
6 Emerging Cyber Threats That Enterprises Face in 2020
This Tech Digest gives an in-depth look at six emerging cyber threats that enterprises could face in 2020. Download your copy today!
Flash Poll
State of Cybersecurity Incident Response
State of Cybersecurity Incident Response
Data breaches and regulations have forced organizations to pay closer attention to the security incident response function. However, security leaders may be overestimating their ability to detect and respond to security incidents. Read this report to find out more.
Twitter Feed
Dark Reading - Bug Report
Bug Report
Enterprise Vulnerabilities
From DHS/US-CERT's National Vulnerability Database
CVE-2020-8966
PUBLISHED: 2020-04-01
There is an Improper Neutralization of Script-Related HTML Tags in a Web Page (Basic XSS) vulnerability in php webpages of Tiki-Wiki Groupware. Tiki-Wiki CMS all versions through 20.0 allows malicious users to cause the injection of malicious code fragments (scripts) into a legitimate web page.
CVE-2020-11463
PUBLISHED: 2020-04-01
An issue was discovered in Deskpro before 2019.8.0. The /api/email_accounts endpoint failed to properly validate a user's privilege, allowing an attacker to retrieve cleartext credentials of all helpdesk email accounts, including incoming and outgoing email credentials. This enables an attacker to g...
CVE-2020-11464
PUBLISHED: 2020-04-01
An issue was discovered in Deskpro before 2019.8.0. The /api/people endpoint failed to properly validate a user's privilege, allowing an attacker to retrieve sensitive information about all users registered on the system. This includes their full name, privilege, email address, phone number, etc.
CVE-2020-11465
PUBLISHED: 2020-04-01
An issue was discovered in Deskpro before 2019.8.0. The /api/apps/* endpoints failed to properly validate a user's privilege, allowing an attacker to control/install helpdesk applications and leak current applications' configurations, including applications used as user sources (used for authenticat...
CVE-2020-11466
PUBLISHED: 2020-04-01
An issue was discovered in Deskpro before 2019.8.0. The /api/tickets endpoint failed to properly validate a user's privilege, allowing an attacker to retrieve arbitrary information about all helpdesk tickets stored in database with numerous filters. This leaked sensitive information to unauthorized ...