Dark Reading is part of the Informa Tech Division of Informa PLC

This site is operated by a business or businesses owned by Informa PLC and all copyright resides with them.Informa PLC's registered office is 5 Howick Place, London SW1P 1WG. Registered in England and Wales. Number 8860726.

Comments
The Edge Cartoon Contest: Need a Lift?
Newest First  |  Oldest First  |  Threaded View
tedelblute
100%
0%
tedelblute,
User Rank: Strategist
11/8/2019 | 7:58:59 PM
Edge Cartoon Contest: Need a Lift?
We are ready to bring our mobile solutions out of the garage.
kccole
0%
100%
kccole,
User Rank: Apprentice
11/8/2019 | 5:22:30 PM
Diesel generator?
"So, as it turns out, a used Chevette is cheaper than UPS. The decision practically made itself!"
PajamaSam
0%
100%
PajamaSam,
User Rank: Strategist
11/8/2019 | 4:30:28 PM
The Edge Cartoon Contest
"Security in the parking lot is abysmal" 
ray.l
0%
100%
ray.l,
User Rank: Apprentice
11/6/2019 | 12:44:33 PM
Caption Contest
By vertically integrating the parking garage operations, I'll save $50 each week.
Dredger23
67%
33%
Dredger23,
User Rank: Strategist
11/6/2019 | 7:58:11 AM
Electric Car Charger
They said we could charge our cars at work...
zydog
50%
50%
zydog,
User Rank: Strategist
11/5/2019 | 3:07:37 PM
Caption Contest
What do you mean, this isn't what you meant by the "Rolling Update"?
ntwalk
80%
20%
ntwalk,
User Rank: Strategist
11/5/2019 | 2:54:45 PM
StartUp
Well, all the other great startups began in a garage. 

 
cachexploit
67%
33%
cachexploit,
User Rank: Strategist
11/5/2019 | 2:44:56 PM
Caption Contest
"This electric car parking is getting out of hand"
cachexploit
50%
50%
cachexploit,
User Rank: Strategist
11/5/2019 | 2:43:33 PM
Caption Contest
"This is not what we expected when they said we could telecommute"


Mobile Banking Malware Up 50% in First Half of 2019
Kelly Sheridan, Staff Editor, Dark Reading,  1/17/2020
Active Directory Needs an Update: Here's Why
Raz Rafaeli, CEO and Co-Founder at Secret Double Octopus,  1/16/2020
New Attack Campaigns Suggest Emotet Threat Is Far From Over
Jai Vijayan, Contributing Writer,  1/16/2020
Register for Dark Reading Newsletters
White Papers
Video
Cartoon Contest
Current Issue
The Year in Security: 2019
This Tech Digest provides a wrap up and overview of the year's top cybersecurity news stories. It was a year of new twists on old threats, with fears of another WannaCry-type worm and of a possible botnet army of Wi-Fi routers. But 2019 also underscored the risk of firmware and trusted security tools harboring dangerous holes that cybercriminals and nation-state hackers could readily abuse. Read more.
Flash Poll
How Enterprises are Attacking the Cybersecurity Problem
How Enterprises are Attacking the Cybersecurity Problem
Organizations have invested in a sweeping array of security technologies to address challenges associated with the growing number of cybersecurity attacks. However, the complexity involved in managing these technologies is emerging as a major problem. Read this report to find out what your peers biggest security challenges are and the technologies they are using to address them.
Twitter Feed
Dark Reading - Bug Report
Bug Report
Enterprise Vulnerabilities
From DHS/US-CERT's National Vulnerability Database
CVE-2019-20399
PUBLISHED: 2020-01-23
A timing vulnerability in the Scalar::check_overflow function in Parity libsecp256k1-rs before 0.3.1 potentially allows an attacker to leak information via a side-channel attack.
CVE-2020-7915
PUBLISHED: 2020-01-22
An issue was discovered on Eaton 5P 850 devices. The Ubicacion SAI field allows XSS attacks by an administrator.
CVE-2019-20391
PUBLISHED: 2020-01-22
An invalid memory access flaw is present in libyang before v1.0-r3 in the function resolve_feature_value() when an if-feature statement is used inside a bit. Applications that use libyang to parse untrusted input yang files may crash.
CVE-2019-20392
PUBLISHED: 2020-01-22
An invalid memory access flaw is present in libyang before v1.0-r1 in the function resolve_feature_value() when an if-feature statement is used inside a list key node, and the feature used is not defined. Applications that use libyang to parse untrusted input yang files may crash.
CVE-2019-20393
PUBLISHED: 2020-01-22
A double-free is present in libyang before v1.0-r1 in the function yyparse() when an empty description is used. Applications that use libyang to parse untrusted input yang files may be vulnerable to this flaw, which would cause a crash or potentially code execution.