Dark Reading is part of the Informa Tech Division of Informa PLC

This site is operated by a business or businesses owned by Informa PLC and all copyright resides with them.Informa PLC's registered office is 5 Howick Place, London SW1P 1WG. Registered in England and Wales. Number 8860726.

Comments
Internet's Security Woes are Not All Technical
Newest First  |  Oldest First  |  Threaded View
Shantaram
50%
50%
Shantaram,
User Rank: Ninja
4/1/2017 | 4:41:33 AM
Re: 192.168.0.1
Very nice! Thanks for informative answers
Joe Stanganelli
100%
0%
Joe Stanganelli,
User Rank: Ninja
3/31/2017 | 3:07:03 PM
Re: Cyber insurance policies
Because cybersecurity, data stewardship, and related matters are such nascent issues for insurers to contend with, don't expect any merger of these considerations with general E&O umbrella policies anytime soon.
jenshadus
50%
50%
jenshadus,
User Rank: Strategist
3/31/2017 | 10:11:43 AM
Re: Cyber insurance policies
Cyber, Security, Ethical policies should be tied together.  All it takes is one nasty incident for the company to look for a fall guy; then employees realize they need to careful with what they are doing.
Joe Stanganelli
50%
50%
Joe Stanganelli,
User Rank: Ninja
3/30/2017 | 11:28:51 AM
Cyber insurance policies
> "Many companies don't know policies often don't insure loss of reputational risk, user trust, or critical intellectual property."

There are policies out there that may cover these things, but -- of course -- you have to ask for them.

The real key here is for businesses to imagine all of the possible consequences of something going wrong, do a risk-management assessment, and then ask the broker about coverage accordingly.


Greater Focus on Privacy Pays Off for Firms
Robert Lemos, Contributing Writer,  1/27/2020
Average Ransomware Payments More Than Doubled in Q4 2019
Jai Vijayan, Contributing Writer,  1/27/2020
Emerging Long-Range WAN Networks Vulnerable to Hacking, Compromise
Jai Vijayan, Contributing Writer,  1/28/2020
Register for Dark Reading Newsletters
White Papers
Video
Cartoon Contest
Write a Caption, Win a Starbucks Card! Click Here
Latest Comment: Physical Security Privilege Escalation
Current Issue
IT 2020: A Look Ahead
Are you ready for the critical changes that will occur in 2020? We've compiled editor insights from the best of our network (Dark Reading, Data Center Knowledge, InformationWeek, ITPro Today and Network Computing) to deliver to you a look at the trends, technologies, and threats that are emerging in the coming year. Download it today!
Flash Poll
How Enterprises are Attacking the Cybersecurity Problem
How Enterprises are Attacking the Cybersecurity Problem
Organizations have invested in a sweeping array of security technologies to address challenges associated with the growing number of cybersecurity attacks. However, the complexity involved in managing these technologies is emerging as a major problem. Read this report to find out what your peers biggest security challenges are and the technologies they are using to address them.
Twitter Feed
Dark Reading - Bug Report
Bug Report
Enterprise Vulnerabilities
From DHS/US-CERT's National Vulnerability Database
CVE-2020-3719
PUBLISHED: 2020-01-29
Magento versions 2.3.3 and earlier, 2.2.10 and earlier, 1.14.4.3 and earlier, and 1.9.4.3 and earlier have an sql injection vulnerability. Successful exploitation could lead to sensitive information disclosure.
CVE-2020-3758
PUBLISHED: 2020-01-29
Magento versions 2.3.3 and earlier, 2.2.10 and earlier, 1.14.4.3 and earlier, and 1.9.4.3 and earlier have a stored cross-site scripting vulnerability. Successful exploitation could lead to sensitive information disclosure.
CVE-2020-8432
PUBLISHED: 2020-01-29
In Das U-Boot through 2020.01, a double free has been found in the cmd/gpt.c do_rename_gpt_parts() function. Double freeing may result in a write-what-where condition, allowing an attacker to execute arbitrary code. NOTE: this vulnerablity was introduced when attempting to fix a memory leak identifi...
CVE-2020-3710
PUBLISHED: 2020-01-29
Adobe Illustrator CC versions 24.0 and earlier have a memory corruption vulnerability. Successful exploitation could lead to arbitrary code execution.
CVE-2020-3711
PUBLISHED: 2020-01-29
Adobe Illustrator CC versions 24.0 and earlier have a memory corruption vulnerability. Successful exploitation could lead to arbitrary code execution.