Dark Reading is part of the Informa Tech Division of Informa PLC

This site is operated by a business or businesses owned by Informa PLC and all copyright resides with them.Informa PLC's registered office is 5 Howick Place, London SW1P 1WG. Registered in England and Wales. Number 8860726.

Comments
Cartoon Contest: Second Wind
Oldest First  |  Newest First  |  Threaded View
ddmclamb
0%
100%
ddmclamb,
User Rank: Apprentice
10/3/2019 | 3:30:15 PM
My feet
My feet are so tired. Wouldn't it be easier if we let the wind turn those things?
mstrmac
0%
100%
mstrmac,
User Rank: Apprentice
10/10/2019 | 4:23:45 PM
Telework
I regret skimming over the telework agreement.
BCURTIS581
67%
33%
BCURTIS581,
User Rank: Apprentice
10/11/2019 | 1:48:01 PM
Mergers
Now that the merger of the cubicle farm with the wind farm is compelte I hear that there are plans to merge with the dairy farm.
jevans1230
75%
25%
jevans1230,
User Rank: Strategist
10/16/2019 | 6:18:00 PM
Disaster Recovery
I've heard of using alternative power sources for Disaster Recovery but this is ridiculous. 
kratiw
0%
100%
kratiw,
User Rank: Strategist
10/31/2019 | 12:19:52 PM
Red Team Simulation
There's the Red Team again, tilting at windmills.
mongo8
50%
50%
mongo8,
User Rank: Apprentice
11/4/2019 | 11:21:42 AM
Bob
Quick...someone ask Bob about his trip to Comic-Con!
daileynicholson
50%
50%
daileynicholson,
User Rank: Strategist
11/13/2020 | 3:16:33 PM
Cartoon Contest: Second Wind
I know that these machines are suppose to be more energy efficient, but mine keeps popping up with "insufficient power".


Edge-DRsplash-10-edge-articles
I Smell a RAT! New Cybersecurity Threats for the Crypto Industry
David Trepp, Partner, IT Assurance with accounting and advisory firm BPM LLP,  7/9/2021
News
Attacks on Kaseya Servers Led to Ransomware in Less Than 2 Hours
Robert Lemos, Contributing Writer,  7/7/2021
Commentary
It's in the Game (but It Shouldn't Be)
Tal Memran, Cybersecurity Expert, CYE,  7/9/2021
Register for Dark Reading Newsletters
White Papers
Video
Cartoon
Current Issue
The State of Cybersecurity Incident Response
In this report learn how enterprises are building their incident response teams and processes, how they research potential compromises, how they respond to new breaches, and what tools and processes they use to remediate problems and improve their cyber defenses for the future.
Flash Poll
Twitter Feed
Dark Reading - Bug Report
Bug Report
Enterprise Vulnerabilities
From DHS/US-CERT's National Vulnerability Database
CVE-2021-37742
PUBLISHED: 2021-07-30
app/View/Elements/GalaxyClusters/view_relation_tree.ctp in MISP 2.4.147 allows Stored XSS when viewing galaxy cluster relationships.
CVE-2021-37743
PUBLISHED: 2021-07-30
app/View/GalaxyElements/ajax/index.ctp in MISP 2.4.147 allows Stored XSS when viewing galaxy cluster elements in JSON format.
CVE-2021-37746
PUBLISHED: 2021-07-30
textview_uri_security_check in textview.c in Claws Mail before 3.18.0, and Sylpheed through 3.7.0, does not have sufficient link checks before accepting a click.
CVE-2020-26563
PUBLISHED: 2021-07-30
ObjectPlanet Opinio before 7.13 allows reflected XSS via the survey/admin/surveyAdmin.do?action=viewSurveyAdmin query string. (There is also stored XSS if input to survey/admin/*.do is accepted from untrusted users.)
CVE-2021-37606
PUBLISHED: 2021-07-30
Meow hash 0.5/calico does not sufficiently thwart key recovery by an attacker who can query whether there's a collision in the bottom bits of the hashes of two messages, as demonstrated by an attack against a long-running web service that allows the attacker to infer collisions by measuring timing d...