Dark Reading is part of the Informa Tech Division of Informa PLC

This site is operated by a business or businesses owned by Informa PLC and all copyright resides with them.Informa PLC's registered office is 5 Howick Place, London SW1P 1WG. Registered in England and Wales. Number 8860726.

Comments
Cartoon: C-Suite & Cybersecurity
Newest First  |  Oldest First  |  Threaded View
Page 1 / 2   >   >>
Manon.
50%
50%
Manon.,
User Rank: Apprentice
2/2/2018 | 2:13:24 AM
Not without a reason, Mr. X. I assure you.
Mr. X: I hereby present you a fail-safe security model, which failed to strike in the minds of our rapidly growing competitor!

Manager: Not without a reason, Mr. X. I assure you, it was not without a reason.
ebyjeeby
50%
50%
ebyjeeby,
User Rank: Strategist
1/25/2018 | 1:04:21 PM
caption
All the security that's in the budget!
ak25455
50%
50%
ak25455,
User Rank: Apprentice
1/23/2018 | 5:19:53 PM
Re: C-suite and Cybersecurity
..and to demonstrate separation of duties within our security department....
Joe Stanganelli
0%
100%
Joe Stanganelli,
User Rank: Ninja
1/22/2018 | 10:22:06 PM
Centralization
I suspect that different approach will involve a six-armed guy doing all three motions -- lest any insight be observed accidentally!
Kristendean80
100%
0%
Kristendean80,
User Rank: Strategist
1/18/2018 | 11:52:23 AM
Re: C-Suite & Cybersecurity
Information Security is a top priority at this company. We've done a lot of stupid things we would like to keep secret.
cynrgy
67%
33%
cynrgy,
User Rank: Strategist
1/17/2018 | 3:47:34 PM
Re: C-Suite & Cybersecurity
We have adopted a three-pronged approach to pc security.  Thus far no one has seen, heard, or spoken of any problems relating to it so it must be affective.
sharrondhuga
50%
50%
sharrondhuga,
User Rank: Apprentice
1/17/2018 | 11:43:35 AM
amazing
amazing
cybersavior
50%
50%
cybersavior,
User Rank: Strategist
1/17/2018 | 8:45:46 AM
Rather....
Equifax's Simian Army
GWAIN
50%
50%
GWAIN,
User Rank: Strategist
1/16/2018 | 1:25:49 PM
Threat vs Risk
We have presented legacy and emerging threats.  Let me introduce you to how the business is dealing with the risk.
InfoSecurityMaster
50%
50%
InfoSecurityMaster,
User Rank: Strategist
1/16/2018 | 12:03:53 PM
Barrel of Monkeys
...so, any questions on how to brief The Board on information security?
Page 1 / 2   >   >>


Edge-DRsplash-10-edge-articles
I Smell a RAT! New Cybersecurity Threats for the Crypto Industry
David Trepp, Partner, IT Assurance with accounting and advisory firm BPM LLP,  7/9/2021
News
Attacks on Kaseya Servers Led to Ransomware in Less Than 2 Hours
Robert Lemos, Contributing Writer,  7/7/2021
Commentary
It's in the Game (but It Shouldn't Be)
Tal Memran, Cybersecurity Expert, CYE,  7/9/2021
Register for Dark Reading Newsletters
White Papers
Video
Cartoon
Current Issue
Enterprise Cybersecurity Plans in a Post-Pandemic World
Download the Enterprise Cybersecurity Plans in a Post-Pandemic World report to understand how security leaders are maintaining pace with pandemic-related challenges, and where there is room for improvement.
Flash Poll
Twitter Feed
Dark Reading - Bug Report
Bug Report
Enterprise Vulnerabilities
From DHS/US-CERT's National Vulnerability Database
CVE-2021-41393
PUBLISHED: 2021-09-18
Teleport before 4.4.11, 5.x before 5.2.4, 6.x before 6.2.12, and 7.x before 7.1.1 allows forgery of SSH host certificates in some situations.
CVE-2021-41394
PUBLISHED: 2021-09-18
Teleport before 4.4.11, 5.x before 5.2.4, 6.x before 6.2.12, and 7.x before 7.1.1 allows alteration of build artifacts in some situations.
CVE-2021-41395
PUBLISHED: 2021-09-18
Teleport before 6.2.12 and 7.x before 7.1.1 allows attackers to control a database connection string, in some situations, via a crafted database name or username.
CVE-2021-3806
PUBLISHED: 2021-09-18
A path traversal vulnerability on Pardus Software Center's "extractArchive" function could allow anyone on the same network to do a man-in-the-middle and write files on the system.
CVE-2021-41392
PUBLISHED: 2021-09-17
static/main-preload.js in Boost Note through 0.22.0 allows remote command execution. A remote attacker may send a crafted IPC message to the exposed vulnerable ipcRenderer IPC interface, which invokes the dangerous openExternal Electron API.