Dark Reading is part of the Informa Tech Division of Informa PLC

This site is operated by a business or businesses owned by Informa PLC and all copyright resides with them.Informa PLC's registered office is 5 Howick Place, London SW1P 1WG. Registered in England and Wales. Number 8860726.

Comments
8 Security Tips to Gift Your Loved Ones For the Holidays
Newest First  |  Oldest First  |  Threaded View
StephenGiderson
50%
50%
StephenGiderson,
User Rank: Strategist
1/9/2019 | 5:04:47 AM
Complicated Password storage
You know one thing that a lot of people take for granted, is how safe and secure their passwords really are. I'm sure that there has to be a better and safer way to generate and take care of so that it isn't easy for people to hack into all of that data that you have in storage! Sadly, it seems a bit too tedious to make use of an application to help you keep track of all of your passwords than it is to just come up with an easy password for yourself and that's where the security of your home systems fail...
markgrogan
50%
50%
markgrogan,
User Rank: Strategist
1/3/2019 | 10:35:17 PM
Nothing is impossible
Cyberattacks are becoming ever too common today so it is entirely up to us to protect our online activities as well as those of our loved ones. Sometimes we become nonchalant of our digital habits because we have never been cyberattacked before. However, we need to know that nothing is impossible and attackers do not choose their victims so just about anyone could fall prey.
bmichaud
50%
50%
bmichaud,
User Rank: Apprentice
12/19/2018 | 9:16:44 AM
Thank you
Thank you and perfect Christmas Gift for loved ones. 
szurier210
50%
50%
szurier210,
User Rank: Moderator
12/18/2018 | 10:34:25 PM
Re: Public Hotspots
Great point, yes myfi can work well instead of using airport wifi. Keep the good ideas coming everyone. I know I didn't think of everything. I think the main point is for people not to feel paralyzed, but on the other hand, know there's potential risk and the threat is real. Too many SMBs and private citizens unconnected with the computer industry still feel that the threat is overblown. That their small bank, insurance company or dentist's office in the Midwest or the South won't get hit. I think as corporate America gets better with security the attackers will prey on small businesses and private citzens. There's just such a reservoir of people and companies for them to hack. Some people will buy in to Cyber Hygiene, others won't. People may just have to learn the hard way. 
RyanSepe
50%
50%
RyanSepe,
User Rank: Ninja
12/18/2018 | 11:30:48 AM
Public Hotspots
In the past 10 years technology has increased to the point where myfi is a very viable option. Where utilizing a myfi device through your phone carrier or using your phone as a personal hotspot or tether you can easily access the internet without connecting to an "untrusted" public hotspot. Data plan permitting I would recommend this option over connecting to wifi provided by airports or retail stores.


COVID-19: Latest Security News & Commentary
Dark Reading Staff 7/9/2020
Introducing 'Secure Access Service Edge'
Rik Turner, Principal Analyst, Infrastructure Solutions, Omdia,  7/3/2020
Russian Cyber Gang 'Cosmic Lynx' Focuses on Email Fraud
Kelly Sheridan, Staff Editor, Dark Reading,  7/7/2020
Register for Dark Reading Newsletters
White Papers
Video
Cartoon
Current Issue
Special Report: Computing's New Normal, a Dark Reading Perspective
This special report examines how IT security organizations have adapted to the "new normal" of computing and what the long-term effects will be. Read it and get a unique set of perspectives on issues ranging from new threats & vulnerabilities as a result of remote working to how enterprise security strategy will be affected long term.
Flash Poll
The Threat from the Internetand What Your Organization Can Do About It
The Threat from the Internetand What Your Organization Can Do About It
This report describes some of the latest attacks and threats emanating from the Internet, as well as advice and tips on how your organization can mitigate those threats before they affect your business. Download it today!
Twitter Feed
Dark Reading - Bug Report
Bug Report
Enterprise Vulnerabilities
From DHS/US-CERT's National Vulnerability Database
CVE-2020-5607
PUBLISHED: 2020-07-10
Open redirect vulnerability in SHIRASAGI v1.13.1 and earlier allows remote attackers to redirect users to arbitrary web sites and conduct phishing attacks via unspecified vectors.
CVE-2020-15001
PUBLISHED: 2020-07-09
An information leak was discovered on Yubico YubiKey 5 NFC devices 5.0.0 to 5.2.6 and 5.3.0 to 5.3.1. The OTP application allows a user to set optional access codes on OTP slots. This access code is intended to prevent unauthorized changes to OTP configurations. The access code is not checked when u...
CVE-2020-15092
PUBLISHED: 2020-07-09
In TimelineJS before version 3.7.0, some user data renders as HTML. An attacker could implement an XSS exploit with maliciously crafted content in a number of data fields. This risk is present whether the source data for the timeline is stored on Google Sheets or in a JSON configuration file. Most T...
CVE-2020-15093
PUBLISHED: 2020-07-09
The tough library (Rust/crates.io) prior to version 0.7.1 does not properly verify the threshold of cryptographic signatures. It allows an attacker to duplicate a valid signature in order to circumvent TUF requiring a minimum threshold of unique signatures before the metadata is considered valid. A ...
CVE-2020-15299
PUBLISHED: 2020-07-09
A reflected Cross-Site Scripting (XSS) Vulnerability in the KingComposer plugin through 2.9.4 for WordPress allows remote attackers to trick a victim into submitting an install_online_preset AJAX request containing base64-encoded JavaScript (in the kc-online-preset-data POST parameter) that is execu...