Dark Reading is part of the Informa Tech Division of Informa PLC

This site is operated by a business or businesses owned by Informa PLC and all copyright resides with them.Informa PLC's registered office is 5 Howick Place, London SW1P 1WG. Registered in England and Wales. Number 8860726.

Comments
To Be Ready for the Security Future, Pay Attention to the Security Past
Newest First  |  Oldest First  |  Threaded View
mjohnson681
mjohnson681,
User Rank: Apprentice
10/6/2017 | 6:45:24 PM
Redefine the Future
Why shouldn't we redefine the futrue of cybersecurity by making the data worthless for those who want to steal it?

https://www.linkedin.com/pulse/give-up-cybersecurity-programs-matthew-r-johnson-cpa-cisa/ 
Joe Stanganelli
Joe Stanganelli,
User Rank: Ninja
9/22/2017 | 11:18:25 PM
Re: Learn from History
@jcavery: We've already been seeing this in the financial services space, which used to be very anti-sharing when it came to threat intelligence. Since cybersecurity has started to be seen as a "greater good" issue impacting the entire industry and national security, many are now clamoring to join the table with each other.
jcavery
jcavery,
User Rank: Moderator
9/18/2017 | 1:22:31 PM
Re: Learn from History
Agree Joe, and any new attack methods captured by honeypots or otherwise need to be shared as soon as possible so we can benefit from the information, instead of acting reactively as you mentioned.
Joe Stanganelli
Joe Stanganelli,
User Rank: Ninja
9/18/2017 | 1:19:36 PM
Re: Learn from History
This really comes down to acting proactively instead of always running around acting reactively. Given that history repeats itself -- and many hackers tend to be lazy and recycle the same old attacks and malicious code in what can sometimes be a predictable pattern -- frameworks need to be constructed and adhered to that allow for a layered, proactive, ever-vigilant approach.
jcavery
jcavery,
User Rank: Moderator
9/18/2017 | 11:34:23 AM
Learn from History
It will be true for computing as long as new technologies and concepts are invented. For example, quantum computing will force us to re-visit all the same problems we originally faced with the internet in its infancy. Even though it is "just" an increase in processing speed, we will still need to apply old lessons to this new capability in order to avoid all those original problems. Example: Password entropy standards will need to move. Perhaps two-factor auth will need to be looked at again as well. All of these original security solutions we have already solved in the past will need to be fresh in our minds for future changes if we are to avoid original failures. Yes, new concepts will need to be invented, however we do not want to reinvent the wheel on the road to the new concepts.


Edge-DRsplash-10-edge-articles
I Smell a RAT! New Cybersecurity Threats for the Crypto Industry
David Trepp, Partner, IT Assurance with accounting and advisory firm BPM LLP,  7/9/2021
News
Attacks on Kaseya Servers Led to Ransomware in Less Than 2 Hours
Robert Lemos, Contributing Writer,  7/7/2021
Commentary
It's in the Game (but It Shouldn't Be)
Tal Memran, Cybersecurity Expert, CYE,  7/9/2021
Register for Dark Reading Newsletters
White Papers
Video
Cartoon
Current Issue
Practical Network Security Approaches for a Multicloud, Hybrid IT World
The report covers areas enterprises should focus on for their multicloud/hybrid cloud security strategy: -increase visibility over the environment -learning cloud-specific skills -relying on established security frameworks -re-architecting the network
Flash Poll
Twitter Feed
Dark Reading - Bug Report
Bug Report
Enterprise Vulnerabilities
From DHS/US-CERT's National Vulnerability Database
CVE-2022-30333
PUBLISHED: 2022-05-09
RARLAB UnRAR before 6.12 on Linux and UNIX allows directory traversal to write to files during an extract (aka unpack) operation, as demonstrated by creating a ~/.ssh/authorized_keys file. NOTE: WinRAR and Android RAR are unaffected.
CVE-2022-23066
PUBLISHED: 2022-05-09
In Solana rBPF versions 0.2.26 and 0.2.27 are affected by Incorrect Calculation which is caused by improper implementation of sdiv instruction. This can lead to the wrong execution path, resulting in huge loss in specific cases. For example, the result of a sdiv instruction may decide whether to tra...
CVE-2022-28463
PUBLISHED: 2022-05-08
ImageMagick 7.1.0-27 is vulnerable to Buffer Overflow.
CVE-2022-28470
PUBLISHED: 2022-05-08
marcador package in PyPI 0.1 through 0.13 included a code-execution backdoor.
CVE-2022-1620
PUBLISHED: 2022-05-08
NULL Pointer Dereference in function vim_regexec_string at regexp.c:2729 in GitHub repository vim/vim prior to 8.2.4901. NULL Pointer Dereference in function vim_regexec_string at regexp.c:2729 allows attackers to cause a denial of service (application crash) via a crafted input.