Dark Reading is part of the Informa Tech Division of Informa PLC

This site is operated by a business or businesses owned by Informa PLC and all copyright resides with them.Informa PLC's registered office is 5 Howick Place, London SW1P 1WG. Registered in England and Wales. Number 8860726.

Comments
8 Security Tips to Gift Your Loved Ones For the Holidays
Newest First  |  Oldest First  |  Threaded View
StephenGiderson
50%
50%
StephenGiderson,
User Rank: Strategist
1/9/2019 | 5:04:47 AM
Complicated Password storage
You know one thing that a lot of people take for granted, is how safe and secure their passwords really are. I'm sure that there has to be a better and safer way to generate and take care of so that it isn't easy for people to hack into all of that data that you have in storage! Sadly, it seems a bit too tedious to make use of an application to help you keep track of all of your passwords than it is to just come up with an easy password for yourself and that's where the security of your home systems fail...
markgrogan
50%
50%
markgrogan,
User Rank: Strategist
1/3/2019 | 10:35:17 PM
Nothing is impossible
Cyberattacks are becoming ever too common today so it is entirely up to us to protect our online activities as well as those of our loved ones. Sometimes we become nonchalant of our digital habits because we have never been cyberattacked before. However, we need to know that nothing is impossible and attackers do not choose their victims so just about anyone could fall prey.
bmichaud
50%
50%
bmichaud,
User Rank: Apprentice
12/19/2018 | 9:16:44 AM
Thank you
Thank you and perfect Christmas Gift for loved ones. 
szurier210
50%
50%
szurier210,
User Rank: Moderator
12/18/2018 | 10:34:25 PM
Re: Public Hotspots
Great point, yes myfi can work well instead of using airport wifi. Keep the good ideas coming everyone. I know I didn't think of everything. I think the main point is for people not to feel paralyzed, but on the other hand, know there's potential risk and the threat is real. Too many SMBs and private citizens unconnected with the computer industry still feel that the threat is overblown. That their small bank, insurance company or dentist's office in the Midwest or the South won't get hit. I think as corporate America gets better with security the attackers will prey on small businesses and private citzens. There's just such a reservoir of people and companies for them to hack. Some people will buy in to Cyber Hygiene, others won't. People may just have to learn the hard way. 
RyanSepe
50%
50%
RyanSepe,
User Rank: Ninja
12/18/2018 | 11:30:48 AM
Public Hotspots
In the past 10 years technology has increased to the point where myfi is a very viable option. Where utilizing a myfi device through your phone carrier or using your phone as a personal hotspot or tether you can easily access the internet without connecting to an "untrusted" public hotspot. Data plan permitting I would recommend this option over connecting to wifi provided by airports or retail stores.


Stop Defending Everything
Kevin Kurzawa, Senior Information Security Auditor,  2/12/2020
Small Business Security: 5 Tips on How and Where to Start
Mike Puglia, Chief Strategy Officer at Kaseya,  2/13/2020
Architectural Analysis IDs 78 Specific Risks in Machine-Learning Systems
Jai Vijayan, Contributing Writer,  2/13/2020
Register for Dark Reading Newsletters
White Papers
Video
Cartoon Contest
Current Issue
6 Emerging Cyber Threats That Enterprises Face in 2020
This Tech Digest gives an in-depth look at six emerging cyber threats that enterprises could face in 2020. Download your copy today!
Flash Poll
How Enterprises Are Developing and Maintaining Secure Applications
How Enterprises Are Developing and Maintaining Secure Applications
The concept of application security is well known, but application security testing and remediation processes remain unbalanced. Most organizations are confident in their approach to AppSec, although others seem to have no approach at all. Read this report to find out more.
Twitter Feed
Dark Reading - Bug Report
Bug Report
Enterprise Vulnerabilities
From DHS/US-CERT's National Vulnerability Database
CVE-2020-1842
PUBLISHED: 2020-02-18
Huawei HEGE-560 version 1.0.1.20(SP2); OSCA-550 and OSCA-550A version 1.0.0.71(SP1); and OSCA-550AX and OSCA-550X version 1.0.0.71(SP2) have an insufficient authentication vulnerability. An attacker can access the device physically and perform specific operations to exploit this vulnerability. Succe...
CVE-2020-8010
PUBLISHED: 2020-02-18
CA Unified Infrastructure Management (Nimsoft/UIM) 9.20 and below contains an improper ACL handling vulnerability in the robot (controller) component. A remote attacker can execute commands, read from, or write to the target system.
CVE-2020-8011
PUBLISHED: 2020-02-18
CA Unified Infrastructure Management (Nimsoft/UIM) 9.20 and below contains a null pointer dereference vulnerability in the robot (controller) component. A remote attacker can crash the Controller service.
CVE-2020-8012
PUBLISHED: 2020-02-18
CA Unified Infrastructure Management (Nimsoft/UIM) 9.20 and below contains a buffer overflow vulnerability in the robot (controller) component. A remote attacker can execute arbitrary code.
CVE-2020-1791
PUBLISHED: 2020-02-18
HUAWEI Mate 20 smartphones with versions earlier than 10.0.0.185(C00E74R3P8) have an improper authorization vulnerability. The system has a logic judging error under certain scenario, successful exploit could allow the attacker to switch to third desktop after a series of operation in ADB mode.