Dark Reading is part of the Informa Tech Division of Informa PLC

This site is operated by a business or businesses owned by Informa PLC and all copyright resides with them.Informa PLC's registered office is 5 Howick Place, London SW1P 1WG. Registered in England and Wales. Number 8860726.

Content by jcavery

jcavery
Member Since: August 14, 2016
Moderator
Posts: 30

Most Recently Posted

30 items
Comment: Re: Attribution - jcavery - 4/9/2021
Comment: Attribution - jcavery - 4/9/2021
Comment: Re: Define Stupid - jcavery - 1/4/2019
Comment: Re: Slap on the Wrist - jcavery - 9/20/2018
Comment: Bugcrowd - jcavery - 10/5/2017
Comment: Learn from History - jcavery - 9/18/2017
Comment: Great Move - jcavery - 3/3/2017
Comment: Love it - jcavery - 2/2/2017
Comment: Vuln Disclosures - jcavery - 1/27/2017
Comment: Re: Darknet Yelp - jcavery - 1/26/2017
Comment: Re: Luxury vs Lives - jcavery - 12/21/2016
Comment: Good - jcavery - 12/8/2016
Comment: Dare to Share - jcavery - 9/28/2016
Comment: Re: Red Teams - jcavery - 9/21/2016
Comment: Caption - jcavery - 9/12/2016
Comment: Re: Good luck - jcavery - 9/11/2016
Comment: Re: Good luck - jcavery - 9/11/2016
Comment: Attribution - jcavery - 9/11/2016
Comment: Re: SMH - jcavery - 8/31/2016
Comment: Re: SMH - jcavery - 8/31/2016


Edge-DRsplash-10-edge-articles
I Smell a RAT! New Cybersecurity Threats for the Crypto Industry
David Trepp, Partner, IT Assurance with accounting and advisory firm BPM LLP,  7/9/2021
News
Attacks on Kaseya Servers Led to Ransomware in Less Than 2 Hours
Robert Lemos, Contributing Writer,  7/7/2021
Commentary
It's in the Game (but It Shouldn't Be)
Tal Memran, Cybersecurity Expert, CYE,  7/9/2021
Register for Dark Reading Newsletters
White Papers
Video
Cartoon
Current Issue
Incorporating a Prevention Mindset into Threat Detection and Response
Threat detection and response systems, by definition, are reactive because they have to wait for damage to be done before finding the attack. With a prevention-mindset, security teams can proactively anticipate the attacker's next move, rather than reacting to specific threats or trying to detect the latest techniques in real-time. The report covers areas enterprises should focus on: What positive response looks like. Improving security hygiene. Combining preventive actions with red team efforts.
Flash Poll
Twitter Feed
Dark Reading - Bug Report
Bug Report
Enterprise Vulnerabilities
From DHS/US-CERT's National Vulnerability Database
CVE-2022-22309
PUBLISHED: 2022-05-24
The POWER systems FSP is vulnerable to unauthenticated logins through the serial port/TTY interface. This vulnerability can be more critical if the serial port is connected to a serial-over-lan device. IBM X-Force ID: 217095.
CVE-2022-22495
PUBLISHED: 2022-05-24
IBM i 7.3, 7.4, and 7.5 is vulnerable to SQL injection. A remote attacker could send specially crafted SQL statements, which could allow the attacker to view, add, modify or delete information in the back-end database. IBM X-Force ID: 226941.
CVE-2020-4926
PUBLISHED: 2022-05-24
A vulnerability in the Spectrum Scale 5.1 core component and IBM Elastic Storage System 6.1 could allow unauthorized access to user data or injection of arbitrary data in the communication protocol. IBM X-Force ID: 191600.
CVE-2013-10002
PUBLISHED: 2022-05-24
A vulnerability was found in Telecommunication Software SAMwin Contact Center Suite 5.1. It has been rated as critical. Affected by this issue is the function getCurrentDBVersion in the library SAMwinLIBVB.dll of the credential handler. Authentication is possible with hard-coded credentials. Upgradi...
CVE-2013-10003
PUBLISHED: 2022-05-24
A vulnerability classified as critical has been found in Telecommunication Software SAMwin Contact Center Suite 5.1. This affects the function getCurrentDBVersion in the library SAMwinLIBVB.dll of the database handler. The manipulation leads to sql injection. The exploit has been disclosed to the pu...