Dark Reading is part of the Informa Tech Division of Informa PLC

This site is operated by a business or businesses owned by Informa PLC and all copyright resides with them.Informa PLC's registered office is 5 Howick Place, London SW1P 1WG. Registered in England and Wales. Number 8860726.

Database Security
Authentication
Mobile
Privacy
Compliance
Careers and People
Identity & Access Management
Security Monitoring
Advanced Threats
Insider Threats
Vulnerability Management
Comments
Name That Toon: Insider Threat
Threaded  |  Newest First  |  Oldest First
daileynicholson
daileynicholson,
 User Rank: Strategist
1/20/2021 | 2:38:24 PM
Name That Toon: Insider Threat
This is not what I meant by "I would like to share some desk space"
RSR555
RSR555,
 User Rank: Strategist
1/21/2021 | 9:20:59 AM
insider threat
Yea my name is Oscar, so what?
blightsey3921
blightsey3921,
 User Rank: Strategist
1/21/2021 | 9:29:07 AM
assistant
Your password for that site is "R3mindM#@Gain" - and, by the way, this is NOT the administrative assistant position I thought I was applying for !
EricL73
EricL73,
 User Rank: Apprentice
1/21/2021 | 9:35:48 AM
Working From Home
Hey! Just checking on your productivity. 
rpo841
rpo841,
 User Rank: Apprentice
1/21/2021 | 10:52:40 AM
Insider Threat
Hi, I'm George from Accounting.  Do you have a password I could borrow?  I'll bring it right back.
Ace2010
Ace2010,
 User Rank: Strategist
1/21/2021 | 12:35:52 PM
Assistant in a Drawer
Becky thought the "Assistant in a Drawer" device was a great idea, until she realized she couldn't stop all the "pop-ups" 
Stephen.py
Stephen.py,
 User Rank: Apprentice
1/21/2021 | 4:04:04 PM
Working from home
Hunny, I looked every where for the dorritos. 
pmauriks
pmauriks,
 User Rank: Strategist
1/21/2021 | 11:01:34 PM
Cartoon Contest.
Pop-up ads have really come a long way!
pmauriks
pmauriks,
 User Rank: Strategist
1/21/2021 | 11:02:42 PM
Cartoon Contest.
I like the old version of Google assistant much better.
pmauriks
pmauriks,
 User Rank: Strategist
1/22/2021 | 2:14:16 AM
Name that Toon
I keep a cardboard cutout of the boss in my desk, to remind me of what working in the office felt like.
Hyznbrg
Hyznbrg,
 User Rank: Strategist
1/22/2021 | 10:29:27 AM
Home Office Managers
If it's not in CRM... it didn't happen!
allistew
allistew,
 User Rank: Apprentice
1/22/2021 | 10:38:58 AM
Password Security
STOP LOOKING IN HERE FOR YOUR PASSWORD!!!
RickStaples
RickStaples,
 User Rank: Strategist
1/22/2021 | 12:23:14 PM
MFA
Hi, I am Mike, your new Multi-Factor Bot.  What is your mother's maiden name?
Ace2010
Ace2010,
 User Rank: Strategist
1/23/2021 | 12:39:37 PM
Genie of the Desk Drawer
I am the Genie of the Help Desk and I am here to grant you three Security Patches!
Michelle
Michelle,
 User Rank: Apprentice
1/23/2021 | 6:01:27 PM
Man-in-the-top-drawer Attack
Your password expired and you have been locked out of your machine. Give me your new 2FA code to continue.
carlosPochote
carlosPochote,
 User Rank: Apprentice
1/25/2021 | 10:28:11 AM
BOT
Leave it to me, that's what BOTs are for.
Ace2010
Ace2010,
 User Rank: Strategist
1/25/2021 | 11:47:17 AM
DLP
After several data breaches, management decided to go with a more aggresive DLP strategy. 
abbyross
abbyross,
 User Rank: Strategist
1/25/2021 | 4:37:00 PM
Name that Toon: Insider Threat
I can't find the back door.
Sadalmelik
Sadalmelik,
 User Rank: Apprentice
1/29/2021 | 8:42:56 AM
Re: Name that Toon: Insider Threat
So this is your enclave? I guess you're compliant.
kratiw
kratiw,
 User Rank: Strategist
1/26/2021 | 9:32:59 AM
Groundhogs Day
Phil saw his shadow. At least six more weeks of cyber attacks. Phils going back in his drawer.
Coldwel
Coldwel,
 User Rank: Apprentice
1/26/2021 | 10:12:42 AM
Name That Toon: Insider Threat
Hey, so using "SolarWinds" as a password is to soon.
Atoms Matter
Atoms Matter,
 User Rank: Apprentice
1/26/2021 | 10:51:31 AM
Re: Pending Review
We need more votes, check the obituaries.
tbienk
tbienk,
 User Rank: Apprentice
1/27/2021 | 11:54:48 AM
Detected Man in The Middle Attack
Okay you got me. Can I leave now?
BigDrD
BigDrD,
 User Rank: Guru
1/27/2021 | 3:36:35 PM
Kind advice!
Hey! Just a kind advice, we have hidden agents in your endpoint that allow us to know that you are not doing the report for your manager and you have too much available time between meetings doing nothing. By the way do not share this information, we could get into some troubles with the law, ok?
Xyberwolf
Xyberwolf,
 User Rank: Apprentice
1/27/2021 | 6:53:47 PM
Caption Contest
"Gimmie a cookie!!"
boyetje
boyetje,
 User Rank: Strategist
1/28/2021 | 11:43:17 AM
Name that Toon
I know policy says you can search my desk at any time, but this seems a bit extreme.
CMS.RedRiver
CMS.RedRiver,
 User Rank: Strategist
1/28/2021 | 12:23:02 PM
Let me know when they're done showing the client around the NOC, OK?
Let me know when they're done showing the client around the NOC, OK?
KevinS993
KevinS993,
 User Rank: Apprentice
1/28/2021 | 3:53:49 PM
Wrong Backdoor
Oh! I thought I had found a backdoor in your system. Didn't realize you were monitoring this port...
ChadF3
ChadF3,
 User Rank: Strategist
1/29/2021 | 3:33:27 PM
Safe to come out?
Is that coronavirus thing over yet? I've been in here in self quarantine since it started.
downandgoing
downandgoing,
 User Rank: Apprentice
2/1/2021 | 9:30:05 AM
Re: Name that Toon: Insider Threat
We've been trying to reach you about your cars extended warranty...
FMB3
FMB3,
 User Rank: Strategist
2/1/2021 | 7:32:41 PM
Re: Name that toon: Insider Threat
They are taking this 'desk sharing' to a whole nuther level!
RothJ
RothJ,
 User Rank: Apprentice
2/1/2021 | 9:34:12 PM
Caption contest
Julie hated being micromanaged.
debugnet
debugnet,
 User Rank: Strategist
2/2/2021 | 12:29:43 PM
Name That Toon: Insider Threat
Password managers have come a long way these days but they are still within arms reach of the keyboard.
packetnarc
packetnarc,
 User Rank: Strategist
2/2/2021 | 3:47:38 PM
Cartoon Caption
"I've been trying to reach you about your automobile extended warranty !"
acampbell448
acampbell448,
 User Rank: Ninja
2/3/2021 | 9:40:41 AM
Is that you clippy?
I know I keep saying I miss Clippy, but not sure this is what I had in mind!
zv54981
zv54981,
 User Rank: Apprentice
2/5/2021 | 10:22:33 AM
name that toon caption
The struggles of working from home: "Honey, what's for lunch"
Elezaby
Elezaby,
 User Rank: Strategist
2/8/2021 | 4:01:23 AM
Caption
"Someone forgot to renew the end point antivirus license, we we're taking it in our hands"


Edge-DRsplash-10-edge-articles
I Smell a RAT! New Cybersecurity Threats for the Crypto Industry
David Trepp, Partner, IT Assurance with accounting and advisory firm BPM LLP,  7/9/2021
News
Attacks on Kaseya Servers Led to Ransomware in Less Than 2 Hours
Robert Lemos, Contributing Writer,  7/7/2021
Commentary
It's in the Game (but It Shouldn't Be)
Tal Memran, Cybersecurity Expert, CYE,  7/9/2021
Register for Dark Reading Newsletters
White Papers
Video
Cartoon
Current Issue
The 10 Most Impactful Types of Vulnerabilities for Enterprises Today
Managing system vulnerabilities is one of the old est - and most frustrating - security challenges that enterprise defenders face. Every software application and hardware device ships with intrinsic flaws - flaws that, if critical enough, attackers can exploit from anywhere in the world. It's crucial that defenders take stock of what areas of the tech stack have the most emerging, and critical, vulnerabilities they must manage. It's not just zero day vulnerabilities. Consider that CISA's Known Exploited Vulnerabilities (KEV) catalog lists vulnerabilitlies in widely used applications that are "actively exploited," and most of them are flaws that were discovered several years ago and have been fixed. There are also emerging vulnerabilities in 5G networks, cloud infrastructure, Edge applications, and firmwares to consider.
Flash Poll
Twitter Feed
Dark Reading - Bug Report
Bug Report
Enterprise Vulnerabilities
From DHS/US-CERT's National Vulnerability Database
CVE-2023-1172
PUBLISHED: 2023-03-17
The Bookly plugin for WordPress is vulnerable to Stored Cross-Site Scripting via the full name value in versions up to, and including, 21.5 due to insufficient input sanitization and output escaping. This makes it possible for unauthenticated attackers to inject arbitrary web scripts in pages that w...
CVE-2023-1469
PUBLISHED: 2023-03-17
The WP Express Checkout plugin for WordPress is vulnerable to Stored Cross-Site Scripting via the ‘pec_coupon[code]’ parameter in versions up to, and including, 2.2.8 due to insufficient input sanitization and output escaping. This makes it possible for authenti...
CVE-2023-1466
PUBLISHED: 2023-03-17
A vulnerability was found in SourceCodester Student Study Center Desk Management System 1.0. It has been rated as critical. This issue affects the function view_student of the file admin/?page=students/view_student. The manipulation of the argument id with the input 3' AND (SELECT 2100 FROM (SELECT(...
CVE-2023-1467
PUBLISHED: 2023-03-17
A vulnerability classified as critical has been found in SourceCodester Student Study Center Desk Management System 1.0. Affected is an unknown function of the file Master.php?f=delete_img of the component POST Parameter Handler. The manipulation of the argument path with the input C%3A%2Ffoo.txt le...
CVE-2023-1468
PUBLISHED: 2023-03-17
A vulnerability classified as critical was found in SourceCodester Student Study Center Desk Management System 1.0. Affected by this vulnerability is an unknown functionality of the file admin/?page=reports&date_from=2023-02-17&date_to=2023-03-17 of the component Report Handler. The manipula...