Dark Reading is part of the Informa Tech Division of Informa PLC

This site is operated by a business or businesses owned by Informa PLC and all copyright resides with them.Informa PLC's registered office is 5 Howick Place, London SW1P 1WG. Registered in England and Wales. Number 8860726.

Comments
Cartoon: Body Metrics
Oldest First  |  Newest First  |  Threaded View
Page 1 / 2   >   >>
Marilyn Cohodas
Marilyn Cohodas,
User Rank: Strategist
10/19/2018 | 1:00:19 PM
Check out the latest from John Klossner
Too funny!
ianrod
ianrod,
User Rank: Strategist
10/22/2018 | 9:14:26 AM
=)
I always said the difference between a retnal scanner and a rectal scanner was a spelling mistake...
SXDude
SXDude,
User Rank: Strategist
10/22/2018 | 11:45:35 AM
Vegas Baby
Vegas hotels trail new security measures for 2019 Black Hat event.
M0nk3
M0nk3,
User Rank: Strategist
10/23/2018 | 12:57:00 AM
Just try and relax...
At first I thought; McAfee has gotten a little too literal with their new Endpoint Security implementation.  Now I find it's not a bad way to spend a morning, and it's brought me and the misses closer together.
REISEN1955
REISEN1955,
User Rank: Ninja
10/23/2018 | 10:54:35 AM
Re: Check out the latest from John Klossner
Sam and Rose have taken security tranparency to the next level.
Joe Stanganelli
Joe Stanganelli,
User Rank: Ninja
10/23/2018 | 4:12:35 PM
Re: Check out the latest from John Klossner
There's yet another suggestive joke in there somewhere about the "Something You Do" biometrics factor...
FKREITZBERG980
FKREITZBERG980,
User Rank: Moderator
10/26/2018 | 4:48:02 PM
Smart Home
That was not what I was expecting from a presentation titled "Exposing the Privacy Risk of the Smart Home"
meonly
meonly,
User Rank: Strategist
10/31/2018 | 11:50:41 AM
Latest Access Control Security Implementation
You know I always knew our company's security was top-notch but with this latest security measure I think they went to far.
TimBerdon
TimBerdon,
User Rank: Apprentice
11/2/2018 | 3:44:58 PM
Scanning
I know that Coverity is expensive, but it now does Firmware, Software, and Underwear scanning.
PanamaVet
PanamaVet,
User Rank: Strategist
11/5/2018 | 9:07:20 AM
The Bright Side
We were the top site on Insecam yesterday!
Page 1 / 2   >   >>


Edge-DRsplash-10-edge-articles
I Smell a RAT! New Cybersecurity Threats for the Crypto Industry
David Trepp, Partner, IT Assurance with accounting and advisory firm BPM LLP,  7/9/2021
News
Attacks on Kaseya Servers Led to Ransomware in Less Than 2 Hours
Robert Lemos, Contributing Writer,  7/7/2021
Commentary
It's in the Game (but It Shouldn't Be)
Tal Memran, Cybersecurity Expert, CYE,  7/9/2021
Register for Dark Reading Newsletters
White Papers
Video
Cartoon
Current Issue
The Promise and Reality of Cloud Security
Cloud security has been part of the cybersecurity conversation for years but has been on the sidelines for most enterprises. The shift to remote work during the COVID-19 pandemic and digital transformation projects have moved cloud infrastructure front-and-center as enterprises address the associated security risks. This report - a compilation of cutting-edge Black Hat research, in-depth Omdia analysis, and comprehensive Dark Reading reporting - explores how cloud security is rapidly evolving.
Flash Poll
Twitter Feed
Dark Reading - Bug Report
Bug Report
Enterprise Vulnerabilities
From DHS/US-CERT's National Vulnerability Database
CVE-2023-0240
PUBLISHED: 2023-01-30
There is a logic error in io_uring's implementation which can be used to trigger a use-after-free vulnerability leading to privilege escalation. In the io_prep_async_work function the assumption that the last io_grab_identity call cannot return false is not true, and in this case the function will u...
CVE-2023-0266
PUBLISHED: 2023-01-30
A use after free vulnerability exists in the ALSA PCM package in the Linux Kernel. SNDRV_CTL_IOCTL_ELEM_WRITE32 is missing locks that can be used in a use-after-free that can result in a priviledge escalation to gain ring0 access from the system user. We recommend upgrading past commit 56b88b...
CVE-2022-45788
PUBLISHED: 2023-01-30
A CWE-754: Improper Check for Unusual or Exceptional Conditions vulnerability exists that could cause arbitrary code execution, denial of service and loss of confidentiality & integrity when a malicious project file is loaded onto the controller. Affected Products: EcoStruxureâ„&cent...
CVE-2022-38451
PUBLISHED: 2023-01-30
A directory traversal vulnerability exists in the httpd update.cgi functionality of FreshTomato 2022.5. A specially crafted HTTP request can lead to arbitrary file read. An attacker can send an HTTP request to trigger this vulnerability.
CVE-2022-42484
PUBLISHED: 2023-01-30
An OS command injection vulnerability exists in the httpd logs/view.cgi functionality of FreshTomato 2022.5. A specially crafted HTTP request can lead to arbitrary command execution. An attacker can send an HTTP request to trigger this vulnerability.