Dark Reading is part of the Informa Tech Division of Informa PLC

This site is operated by a business or businesses owned by Informa PLC and all copyright resides with them.Informa PLC's registered office is 5 Howick Place, London SW1P 1WG. Registered in England and Wales. Number 8860726.

Comments
How Attackers Used Look-Alike Domains to Steal $1 Million From a Chinese VC
Newest First  |  Oldest First  |  Threaded View
AshiSalami
50%
50%
AshiSalami,
User Rank: Apprentice
2/23/2020 | 3:49:28 PM
Re: Domain spoofing
Great post, also am very appreciative of the anti-spam measures that are being taken on this site. Donald

 
casun_darkread
50%
50%
casun_darkread,
User Rank: Author
12/16/2019 | 12:04:01 PM
Domain spoofing
The amount of typosquatting and domain spoofing attacks used nowadays to trick users is alarming. Organizations should be closely monitoring any Domain and Certificate registrations that are a close match to the real domain. 
joshuaprice153
50%
50%
joshuaprice153,
User Rank: Apprentice
12/10/2019 | 11:08:51 PM
How Attackers Used Look-Alike Domains
Your way of putting things together is admirable. Unfortunately, Im still quite in the dark about all of this so I'll probably come back when I can contribute a more decent comment. kitchen remodeling Orlando
 
RyanWeeks
50%
50%
RyanWeeks,
User Rank: Author
12/10/2019 | 3:09:47 PM
Takedown Services
Thanks for sharing! A seasoned look alike domain takedown service is a must have in a secops and threat management programs these days. Even with the best SPF, DKIM and DMARC and Anti-Spoofing policies in place a well baked look-alike domain has the potential, when weaponized, to open an organization up to damaging phishing attacks. Definately a key capability to invest in.
leo5121472313
50%
50%
leo5121472313,
User Rank: Apprentice
12/10/2019 | 8:10:44 AM
Re: Pending Review
Best plex Plugins: Plex shutdown the plugin support last year but fortunately, it still allows you to manually sideload them via WebTools. Heres the only problem is how do you find good Plex plugins? Well, I've been using some Plex plugin myself which let you:

 

plex addons
attrapereves
50%
50%
attrapereves,
User Rank: Apprentice
12/8/2019 | 9:46:53 AM
Re: Pending Review
Great post, good job!


44% of Security Threats Start in the Cloud
Kelly Sheridan, Staff Editor, Dark Reading,  2/19/2020
Zero-Factor Authentication: Owning Our Data
Nick Selby, Chief Security Officer at Paxos Trust Company,  2/19/2020
Register for Dark Reading Newsletters
White Papers
Video
Cartoon
Current Issue
6 Emerging Cyber Threats That Enterprises Face in 2020
This Tech Digest gives an in-depth look at six emerging cyber threats that enterprises could face in 2020. Download your copy today!
Flash Poll
How Enterprises Are Developing and Maintaining Secure Applications
How Enterprises Are Developing and Maintaining Secure Applications
The concept of application security is well known, but application security testing and remediation processes remain unbalanced. Most organizations are confident in their approach to AppSec, although others seem to have no approach at all. Read this report to find out more.
Twitter Feed
Dark Reading - Bug Report
Bug Report
Enterprise Vulnerabilities
From DHS/US-CERT's National Vulnerability Database
CVE-2019-4557
PUBLISHED: 2020-02-25
IBM Qradar Advisor 1.1 through 2.5 with Watson uses weaker than expected cryptographic algorithms that could allow an attacker to decrypt highly sensitive information. IBM X-Force ID: 166206.
CVE-2019-4672
PUBLISHED: 2020-02-25
IBM QRadar Advisor 1.1 through 2.5 could allow an unauthorized attacker to obtain sensitive information from specially crafted HTTP requests that could aid in further attacks against the system. IBM X-Force ID: 171438.
CVE-2020-8818
PUBLISHED: 2020-02-25
An issue was discovered in the CardGate Payments plugin through 2.0.30 for Magento 2. Lack of origin authentication in the IPN callback processing function in Controller/Payment/Callback.php allows an attacker to remotely replace critical plugin settings (merchant ID, secret key, etc.) and therefore...
CVE-2020-8819
PUBLISHED: 2020-02-25
An issue was discovered in the CardGate Payments plugin through 3.1.15 for WooCommerce. Lack of origin authentication in the IPN callback processing function in cardgate/cardgate.php allows an attacker to remotely replace critical plugin settings (merchant ID, secret key, etc.) and therefore bypass ...
CVE-2020-9385
PUBLISHED: 2020-02-25
A NULL Pointer Dereference exists in libzint in Zint 2.7.1 because multiple + characters are mishandled in add_on in upcean.c, when called from eanx in upcean.c during EAN barcode generation.