Dark Reading is part of the Informa Tech Division of Informa PLC

This site is operated by a business or businesses owned by Informa PLC and all copyright resides with them.Informa PLC's registered office is 5 Howick Place, London SW1P 1WG. Registered in England and Wales. Number 8860726.

Comments
Name That Toon: Beat the Heat
Newest First  |  Oldest First  |  Threaded View
<<   <   Page 4 / 6   >   >>
Ace2010
33%
67%
Ace2010,
User Rank: Strategist
7/22/2019 | 2:27:29 PM
Not a vacation
Dan and Rhonda were not fooled by the company's attempt to make them believe they were relaxing on a beach somewhere.
Blaze007
50%
50%
Blaze007,
User Rank: Strategist
7/22/2019 | 12:23:24 PM
Re: New Caption Contest! "Phishing" vs. "Fishing"
Curiously, the use of lifeguards to thwart "fishing" at Bubba's Discount Software & Trinkets didn't prove to be as successful as initially anticipated.
trichodon
33%
67%
trichodon,
User Rank: Apprentice
7/22/2019 | 10:45:55 AM
Caption
We're ready for the deep dive into office spending!
Ace2010
75%
25%
Ace2010,
User Rank: Strategist
7/21/2019 | 1:07:14 PM
Dangerous waters ahead!
Keep your eyes open! This area has been prone to WireShark attacks!
mbartel1418
25%
75%
mbartel1418,
User Rank: Strategist
7/20/2019 | 3:57:05 PM
Caption
Now this is the worst micromanagment I've seen.
jeffmccollum
0%
100%
jeffmccollum,
User Rank: Apprentice
7/19/2019 | 1:10:58 PM
Name That Toon: Beat the Heat
"All security engineers and developers out of the pool! Time for the CISO swim!
kennenga@gmail.com
25%
75%
[email protected],
User Rank: Apprentice
7/18/2019 | 11:18:19 PM
Excuse ME!
I said no running RDP in the lap pool! 
donm5656
0%
100%
donm5656,
User Rank: Apprentice
7/18/2019 | 10:58:24 PM
Team Phish
All Right Team, lets just see who's L33T out there! First one to Phish a C Ring officer gets the rest of the day off! One rule - you can only type with one hand! 3-2-1-GO!
justmomoh
25%
75%
justmomoh,
User Rank: Apprentice
7/18/2019 | 4:09:21 PM
Cartoon caption
 "Your Subscription to life-guide is still active, dont be afraid to put your information online, I got your back"
camerobabe
67%
33%
camerobabe,
User Rank: Strategist
7/18/2019 | 12:04:07 PM
Whaling Alert
Attention! Whaling Alert! Whaling Alert! Whaling attempt spotted in the CEO's email.
<<   <   Page 4 / 6   >   >>


Navigating Security in the Cloud
Diya Jolly, Chief Product Officer, Okta,  12/4/2019
Register for Dark Reading Newsletters
White Papers
Video
Cartoon Contest
Write a Caption, Win a Starbucks Card! Click Here
Latest Comment: "The security team seem to be taking SiegeWare seriously" 
Current Issue
Navigating the Deluge of Security Data
In this Tech Digest, Dark Reading shares the experiences of some top security practitioners as they navigate volumes of security data. We examine some examples of how enterprises can cull this data to find the clues they need.
Flash Poll
Rethinking Enterprise Data Defense
Rethinking Enterprise Data Defense
Frustrated with recurring intrusions and breaches, cybersecurity professionals are questioning some of the industrys conventional wisdom. Heres a look at what theyre thinking about.
Twitter Feed
Dark Reading - Bug Report
Bug Report
Enterprise Vulnerabilities
From DHS/US-CERT's National Vulnerability Database
CVE-2019-16770
PUBLISHED: 2019-12-05
A poorly-behaved client could use keepalive requests to monopolize Puma's reactor and create a denial of service attack. If more keepalive connections to Puma are opened than there are threads available, additional connections will wait permanently if the attacker sends requests frequently enough.
CVE-2019-19609
PUBLISHED: 2019-12-05
The Strapi framework before 3.0.0-beta.17.8 is vulnerable to Remote Code Execution in the Install and Uninstall Plugin components of the Admin panel, because it does not sanitize the plugin name, and attackers can inject arbitrary shell commands to be executed by the execa function.
CVE-2019-16768
PUBLISHED: 2019-12-05
Exception messages from internal exceptions (like database exception) are wrapped by \Symfony\Component\Security\Core\Exception\AuthenticationServiceException and propagated through the system to UI. Therefore, some internal system information may leak and be visible to the customer. A validation m...
CVE-2012-1105
PUBLISHED: 2019-12-05
An Information Disclosure vulnerability exists in the Jasig Project php-pear-CAS 1.2.2 package in the /tmp directory. The Central Authentication Service client library archives the debug logging file in an insecure manner.
CVE-2019-16769
PUBLISHED: 2019-12-05
Affected versions of this package are vulnerable to Cross-site Scripting (XSS). It does not properly mitigate against unsafe characters in serialized regular expressions. This vulnerability is not affected on Node.js environment since Node.js's implementation of RegExp.prototype.toString() backslash...