Dark Reading is part of the Informa Tech Division of Informa PLC

This site is operated by a business or businesses owned by Informa PLC and all copyright resides with them.Informa PLC's registered office is 5 Howick Place, London SW1P 1WG. Registered in England and Wales. Number 8860726.

Comments
Cartoon: Cyber Hiring Challenges
Newest First  |  Oldest First  |  Threaded View
boholuxe
50%
50%
boholuxe,
User Rank: Apprentice
3/5/2020 | 4:36:19 PM
Money for securety
Unfortunately nobody wants to spend money on security. Usually they change their mind but often it is too late
RyanSepe
50%
50%
RyanSepe,
User Rank: Ninja
2/28/2020 | 2:17:19 PM
Ignorance Plea
"All this awareness would make us liable. Without them its ignorance, if we hire them it becomes negligence and i prefer ignorance. What you don't know, can't hurt you."
jrig1842
50%
50%
jrig1842,
User Rank: Strategist
2/28/2020 | 11:19:41 AM
The cost of expertise
.....I'm going to have to pay the cyber guy how much????
Elezaby
100%
0%
Elezaby,
User Rank: Strategist
2/26/2020 | 10:50:57 AM
Caption
"... you see, he has solid cyber security knowledge, still we cannot hire him with his long hair and T-shirt"
acampbell448
100%
0%
acampbell448,
User Rank: Strategist
2/21/2020 | 4:32:55 PM
No budget for upgrades
He said XP and 7 are both insecure?   And Server 2003 and 2008 also?   Can't have him saying those things! We don't have any budget to upgrade.....besides they are working just fine.
Tempest2004
50%
50%
Tempest2004,
User Rank: Strategist
2/20/2020 | 9:02:59 PM
HR Interview
I don't know anything about Information Security but I have to decide if you qualify for an interview with the Security team.  I have a set of questions to ask. 1.  What is your favorite Sci Fi book, show or movie?
jrig1842
50%
50%
jrig1842,
User Rank: Strategist
2/20/2020 | 7:37:01 AM
Outdated Tech Department
Yeah, we told him not to focus on your CP/M gear.


COVID-19: Latest Security News & Commentary
Dark Reading Staff 6/1/2020
Stay-at-Home Orders Coincide With Massive DNS Surge
Robert Lemos, Contributing Writer,  5/27/2020
Register for Dark Reading Newsletters
White Papers
Video
Cartoon Contest
Write a Caption, Win a Starbucks Card! Click Here
Latest Comment: It's the latest version of antivirus.
Current Issue
How Cybersecurity Incident Response Programs Work (and Why Some Don't)
This Tech Digest takes a look at the vital role cybersecurity incident response (IR) plays in managing cyber-risk within organizations. Download the Tech Digest today to find out how well-planned IR programs can detect intrusions, contain breaches, and help an organization restore normal operations.
Flash Poll
Twitter Feed
Dark Reading - Bug Report
Bug Report
Enterprise Vulnerabilities
From DHS/US-CERT's National Vulnerability Database
CVE-2020-13775
PUBLISHED: 2020-06-02
ZNC before 1.8.1-rc1 allows attackers to trigger an application crash (with a NULL pointer dereference) if echo-message is not enabled and there is no network.
CVE-2020-12607
PUBLISHED: 2020-06-02
An issue was discovered in fastecdsa before 2.1.2. When using the NIST P-256 curve in the ECDSA implementation, the point at infinity is mishandled. This means that for an extreme value in k and s^-1, the signature verification fails even if the signature is correct. This behavior is not solely a us...
CVE-2020-13764
PUBLISHED: 2020-06-02
common.php in the Gravity Forms plugin before 2.4.9 for WordPress can leak hashed passwords because user_pass is not considered a special case for a $current_user->get($property) call.
CVE-2020-13760
PUBLISHED: 2020-06-02
In Joomla! before 3.9.19, missing token checks in com_postinstall lead to CSRF.
CVE-2020-13761
PUBLISHED: 2020-06-02
In Joomla! before 3.9.19, lack of input validation in the heading tag option of the "Articles - Newsflash" and "Articles - Categories" modules allows XSS.