Dark Reading is part of the Informa Tech Division of Informa PLC

This site is operated by a business or businesses owned by Informa PLC and all copyright resides with them.Informa PLC's registered office is 5 Howick Place, London SW1P 1WG. Registered in England and Wales. Number 8860726.

Comments
Cartoon: Identity Theft Mitigation
Oldest First  |  Newest First  |  Threaded View
Marilyn Cohodas
67%
33%
Marilyn Cohodas,
User Rank: Strategist
8/22/2019 | 9:23:15 AM
Check out our latest cartoon....
It will make you LOL -- from John Klossner. 
Ratteau
0%
100%
Ratteau,
User Rank: Strategist
8/22/2019 | 9:30:43 AM
Misdirection at it finest
(Thinks) There's no way they will guess [email protected] now!
acampbell448
0%
100%
acampbell448,
User Rank: Strategist
8/23/2019 | 10:13:40 AM
Password Manager?
What do you mean - I have a good system - I don't need a password manager!
Ghostwolf
0%
100%
Ghostwolf,
User Rank: Strategist
8/23/2019 | 5:39:46 PM
Post-it Note Overlord
"Tom...I see your point, but over 200 privacy and security policy violations concentrated in one cubicle borders on a psychological disorder.  I'm just saying..."
Hyznbrg
75%
25%
Hyznbrg,
User Rank: Strategist
8/26/2019 | 11:34:48 AM
End Point Security... your're doing it right!
I've now changed every default password on every printer in the office.
acampbell448
33%
67%
acampbell448,
User Rank: Strategist
9/6/2019 | 9:56:04 AM
Agile?
So I think I understand the concept of an Kanban board but not sure I have implemented this correctly......
kratiw
0%
100%
kratiw,
User Rank: Strategist
9/11/2019 | 7:06:45 AM
SSO
<sigh> If we only had that single sign on, I'd only need one post-it note.


Tor Weaponized to Steal Bitcoin
Dark Reading Staff 10/18/2019
Data Privacy Protections for the Most Vulnerable -- Children
Dimitri Sirota, Founder & CEO of BigID,  10/17/2019
State of SMB Insecurity by the Numbers
Ericka Chickowski, Contributing Writer,  10/17/2019
Register for Dark Reading Newsletters
White Papers
Video
Cartoon
Current Issue
7 Threats & Disruptive Forces Changing the Face of Cybersecurity
This Dark Reading Tech Digest gives an in-depth look at the biggest emerging threats and disruptive forces that are changing the face of cybersecurity today.
Flash Poll
2019 Online Malware and Threats
2019 Online Malware and Threats
As cyberattacks become more frequent and more sophisticated, enterprise security teams are under unprecedented pressure to respond. Is your organization ready?
Twitter Feed
Dark Reading - Bug Report
Bug Report
Enterprise Vulnerabilities
From DHS/US-CERT's National Vulnerability Database
CVE-2019-18387
PUBLISHED: 2019-10-23
Sourcecodester Hotel and Lodge Management System 1.0 is vulnerable to unauthenticated SQL injection and can allow remote attackers to execute arbitrary SQL commands via the id parameter to the edit page for Customer, Room, Currency, Room Booking Details, or Tax Details.
CVE-2019-18212
PUBLISHED: 2019-10-23
XMLLanguageService.java in XML Language Server (aka lsp4xml) before 0.9.1, as used in Red Hat XML Language Support (aka vscode-xml) before 0.9.1 for Visual Studio and other products, allows a remote attacker to write to arbitrary files via Directory Traversal.
CVE-2019-18213
PUBLISHED: 2019-10-23
XML Language Server (aka lsp4xml) before 0.9.1, as used in Red Hat XML Language Support (aka vscode-xml) before 0.9.1 for Visual Studio and other products, allows XXE via a crafted XML document, with resultant SSRF (as well as SMB connection initiation that can lead to NetNTLM challenge/response cap...
CVE-2019-18384
PUBLISHED: 2019-10-23
An issue was discovered on TerraMaster FS-210 4.0.19 devices. An authenticated remote non-administrative user can read unauthorized shared files, as demonstrated by the filename=*public*%25252Fadmin_OnlyRead.txt substring.
CVE-2019-18385
PUBLISHED: 2019-10-23
An issue was discovered on TerraMaster FS-210 4.0.19 devices. An unauthenticated attacker can download log files via the include/makecvs.php?Event= substring.