Dark Reading is part of the Informa Tech Division of Informa PLC

This site is operated by a business or businesses owned by Informa PLC and all copyright resides with them.Informa PLC's registered office is 5 Howick Place, London SW1P 1WG. Registered in England and Wales. Number 8860726.

Comments
8 Security Tips to Gift Your Loved Ones For the Holidays
Newest First  |  Oldest First  |  Threaded View
StephenGiderson
50%
50%
StephenGiderson,
User Rank: Strategist
1/9/2019 | 5:04:47 AM
Complicated Password storage
You know one thing that a lot of people take for granted, is how safe and secure their passwords really are. I'm sure that there has to be a better and safer way to generate and take care of so that it isn't easy for people to hack into all of that data that you have in storage! Sadly, it seems a bit too tedious to make use of an application to help you keep track of all of your passwords than it is to just come up with an easy password for yourself and that's where the security of your home systems fail...
markgrogan
50%
50%
markgrogan,
User Rank: Strategist
1/3/2019 | 10:35:17 PM
Nothing is impossible
Cyberattacks are becoming ever too common today so it is entirely up to us to protect our online activities as well as those of our loved ones. Sometimes we become nonchalant of our digital habits because we have never been cyberattacked before. However, we need to know that nothing is impossible and attackers do not choose their victims so just about anyone could fall prey.
bmichaud
50%
50%
bmichaud,
User Rank: Apprentice
12/19/2018 | 9:16:44 AM
Thank you
Thank you and perfect Christmas Gift for loved ones. 
szurier210
50%
50%
szurier210,
User Rank: Moderator
12/18/2018 | 10:34:25 PM
Re: Public Hotspots
Great point, yes myfi can work well instead of using airport wifi. Keep the good ideas coming everyone. I know I didn't think of everything. I think the main point is for people not to feel paralyzed, but on the other hand, know there's potential risk and the threat is real. Too many SMBs and private citizens unconnected with the computer industry still feel that the threat is overblown. That their small bank, insurance company or dentist's office in the Midwest or the South won't get hit. I think as corporate America gets better with security the attackers will prey on small businesses and private citzens. There's just such a reservoir of people and companies for them to hack. Some people will buy in to Cyber Hygiene, others won't. People may just have to learn the hard way. 
RyanSepe
50%
50%
RyanSepe,
User Rank: Ninja
12/18/2018 | 11:30:48 AM
Public Hotspots
In the past 10 years technology has increased to the point where myfi is a very viable option. Where utilizing a myfi device through your phone carrier or using your phone as a personal hotspot or tether you can easily access the internet without connecting to an "untrusted" public hotspot. Data plan permitting I would recommend this option over connecting to wifi provided by airports or retail stores.


Malicious USB Drive Hides Behind Gift Card Lure
Dark Reading Staff 3/27/2020
How Attackers Could Use Azure Apps to Sneak into Microsoft 365
Kelly Sheridan, Staff Editor, Dark Reading,  3/24/2020
Register for Dark Reading Newsletters
White Papers
Video
Cartoon Contest
Write a Caption, Win a Starbucks Card! Click Here
Latest Comment: This comment is waiting for review by our moderators.
Current Issue
6 Emerging Cyber Threats That Enterprises Face in 2020
This Tech Digest gives an in-depth look at six emerging cyber threats that enterprises could face in 2020. Download your copy today!
Flash Poll
State of Cybersecurity Incident Response
State of Cybersecurity Incident Response
Data breaches and regulations have forced organizations to pay closer attention to the security incident response function. However, security leaders may be overestimating their ability to detect and respond to security incidents. Read this report to find out more.
Twitter Feed
Dark Reading - Bug Report
Bug Report
Enterprise Vulnerabilities
From DHS/US-CERT's National Vulnerability Database
CVE-2020-10940
PUBLISHED: 2020-03-27
Local Privilege Escalation can occur in PHOENIX CONTACT PORTICO SERVER through 3.0.7 when installed to run as a service.
CVE-2020-10939
PUBLISHED: 2020-03-27
Insecure, default path permissions in PHOENIX CONTACT PC WORX SRT through 1.14 allow for local privilege escalation.
CVE-2020-6095
PUBLISHED: 2020-03-27
An exploitable denial of service vulnerability exists in the GstRTSPAuth functionality of GStreamer/gst-rtsp-server 1.14.5. A specially crafted RTSP setup request can cause a null pointer deference resulting in denial-of-service. An attacker can send a malicious packet to trigger this vulnerability.
CVE-2020-10817
PUBLISHED: 2020-03-27
The custom-searchable-data-entry-system (aka Custom Searchable Data Entry System) plugin through 1.7.1 for WordPress allows SQL Injection. NOTE: this product is discontinued.
CVE-2020-10952
PUBLISHED: 2020-03-27
GitLab EE/CE 8.11 through 12.9.1 allows blocked users to pull/push docker images.