Dark Reading is part of the Informa Tech Division of Informa PLC

This site is operated by a business or businesses owned by Informa PLC and all copyright resides with them.Informa PLC's registered office is 5 Howick Place, London SW1P 1WG. Registered in England and Wales. Number 8860726.

Comments
Cartoon: Cyber Hiring Challenges
Oldest First  |  Newest First  |  Threaded View
jrig1842
50%
50%
jrig1842,
User Rank: Strategist
2/20/2020 | 7:37:01 AM
Outdated Tech Department
Yeah, we told him not to focus on your CP/M gear.
Tempest2004
50%
50%
Tempest2004,
User Rank: Strategist
2/20/2020 | 9:02:59 PM
HR Interview
I don't know anything about Information Security but I have to decide if you qualify for an interview with the Security team.  I have a set of questions to ask. 1.  What is your favorite Sci Fi book, show or movie?
acampbell448
100%
0%
acampbell448,
User Rank: Strategist
2/21/2020 | 4:32:55 PM
No budget for upgrades
He said XP and 7 are both insecure?   And Server 2003 and 2008 also?   Can't have him saying those things! We don't have any budget to upgrade.....besides they are working just fine.
Elezaby
100%
0%
Elezaby,
User Rank: Strategist
2/26/2020 | 10:50:57 AM
Caption
"... you see, he has solid cyber security knowledge, still we cannot hire him with his long hair and T-shirt"
jrig1842
50%
50%
jrig1842,
User Rank: Strategist
2/28/2020 | 11:19:41 AM
The cost of expertise
.....I'm going to have to pay the cyber guy how much????
RyanSepe
50%
50%
RyanSepe,
User Rank: Ninja
2/28/2020 | 2:17:19 PM
Ignorance Plea
"All this awareness would make us liable. Without them its ignorance, if we hire them it becomes negligence and i prefer ignorance. What you don't know, can't hurt you."
boholuxe
50%
50%
boholuxe,
User Rank: Apprentice
3/5/2020 | 4:36:19 PM
Money for securety
Unfortunately nobody wants to spend money on security. Usually they change their mind but often it is too late


COVID-19: Latest Security News & Commentary
Dark Reading Staff 6/1/2020
Stay-at-Home Orders Coincide With Massive DNS Surge
Robert Lemos, Contributing Writer,  5/27/2020
Register for Dark Reading Newsletters
White Papers
Video
Cartoon Contest
Current Issue
How Cybersecurity Incident Response Programs Work (and Why Some Don't)
This Tech Digest takes a look at the vital role cybersecurity incident response (IR) plays in managing cyber-risk within organizations. Download the Tech Digest today to find out how well-planned IR programs can detect intrusions, contain breaches, and help an organization restore normal operations.
Flash Poll
Twitter Feed
Dark Reading - Bug Report
Bug Report
Enterprise Vulnerabilities
From DHS/US-CERT's National Vulnerability Database
CVE-2020-13757
PUBLISHED: 2020-06-01
Python-RSA 4.0 ignores leading '\0' bytes during decryption of ciphertext. This could conceivably have a security-relevant impact, e.g., by helping an attacker to infer that an application uses Python-RSA, or if the length of accepted ciphertext affects application behavior (such as by causing exces...
CVE-2020-13758
PUBLISHED: 2020-06-01
modules/security/classes/general.post_filter.php/post_filter.php in the Web Application Firewall in Bitrix24 through 20.0.950 allows XSS by placing %00 before the payload.
CVE-2020-9291
PUBLISHED: 2020-06-01
An Insecure Temporary File vulnerability in FortiClient for Windows 6.2.1 and below may allow a local user to gain elevated privileges via exhausting the pool of temporary file names combined with a symbolic link attack.
CVE-2019-15709
PUBLISHED: 2020-06-01
An improper input validation in FortiAP-S/W2 6.2.0 to 6.2.2, 6.0.5 and below, FortiAP-U 6.0.1 and below CLI admin console may allow unauthorized administrators to overwrite system files via specially crafted tcpdump commands in the CLI.
CVE-2020-13695
PUBLISHED: 2020-06-01
In QuickBox Community Edition through 2.5.5 and Pro Edition through 2.1.8, the local www-data user has sudo privileges to execute grep as root without a password, which allows an attacker to obtain sensitive information via a grep of a /root/*.db or /etc/shadow file.