Dark Reading is part of the Informa Tech Division of Informa PLC

This site is operated by a business or businesses owned by Informa PLC and all copyright resides with them.Informa PLC's registered office is 5 Howick Place, London SW1P 1WG. Registered in England and Wales. Number 8860726.

Perimeter

Dark Reading Launches New Tech Center On Security For Small And Midsize Enterprises

Today Dark Reading launches a new feature: the SMB Security Tech Center, a subsite of Dark Reading devoted to bringing you news, insight, and in-depth reporting on the topic of data security in small and midsize businesses.

Today Dark Reading launches a new feature: the SMB Security Tech Center, a subsite of Dark Reading devoted to bringing you news, insight, and in-depth reporting on the topic of data security in small and midsize businesses.This is the fifth of our Dark Reading Tech Centers, which are designed to provide you with a more focused view of specific issues, threats, and technologies in the world of IT security. The Tech Centers offer in-depth reports and studies, breaking news, and links to additional articles and information not found on the main Dark Reading site. Just as a traditional newspaper offers in-depth sections or supplements on sports, entertainment, or politics, the Dark Reading Tech Centers provide an additional range of news and information for readers who have an interest in specific aspects of IT security.

While Dark Reading does a good deal of coverage of online exploits and newly discovered vulnerabilities that might affect enterprises of all sizes, we recognize that the small and midsize enterprise seldom has a security expert on staff. The SMB Security Tech Center is designed to provide news and insight about best practices and technologies for readers who might not be security experts, but who are responsible for managing data security within their organizations.

With this charter in mind, you can expect the SMB Security Tech Center to take a slightly different perspective than the rest of the Dark Reading site; our coverage will be focused not only on current threats and defenses, but also on how to do security and compliance without dedicated staffing or a large IT budget. We'll speak directly to SMB security managers about their specific needs and challenges -- in language that doesn't require a certification to understand.

The goal of the SMB Security Tech Center is to help you make informed decisions about what tools, technologies, services, and practices SMBs can use to secure and defend their sensitive business data. In some cases, we'll discuss practices you can implement yourself; in other cases, we'll offer a look at technologies or services you can purchase from vendors, service providers, or consultants. And we'll keep you abreast of the latest threats to SMBs and the technologies they use -- and how you can respond to those threats.

Of course, the creation of the SMB Security Tech Center doesn't mean our coverage of SMB issues on the main Dark Reading site will decrease. You'll continue to see stories about threats to smaller businesses on our home page, and the subject will remain a topic of discussion for our bloggers and on our message boards. But when you click on those stories or blogs, you'll be brought here, to the Tech Center, so that you can see the full range of news and information we offer on the topic, and gain additional context to support what you're reading.

We think the SMB Security Tech Center will help you understand the security challenges smaller organizations face, and make good decisions about the tools and practices that might work best for your organization. But in the end, this is your site. Please let us know what you think of the Tech Center, our coverage of SMB security issues, and what you'd like to see us cover in more depth. We can't guarantee we'll answer every query with a story or in-depth report, but we'll do our best to meet your needs for additional information and analysis. If it has to do with threats, defenses, or best practices in SMB security, then you'll find it here. And if you don't, let us know -- our goal is to be the most comprehensive source of SMB security news and information on the Web.

-- Tim Wilson, editor, Dark Reading Tim Wilson is Editor in Chief and co-founder of Dark Reading.com, UBM Tech's online community for information security professionals. He is responsible for managing the site, assigning and editing content, and writing breaking news stories. Wilson has been recognized as one ... View Full Bio

Comment  | 
Print  | 
More Insights
Comments
Newest First  |  Oldest First  |  Threaded View
44% of Security Threats Start in the Cloud
Kelly Sheridan, Staff Editor, Dark Reading,  2/19/2020
Zero-Factor Authentication: Owning Our Data
Nick Selby, Chief Security Officer at Paxos Trust Company,  2/19/2020
Register for Dark Reading Newsletters
White Papers
Video
Cartoon
Current Issue
6 Emerging Cyber Threats That Enterprises Face in 2020
This Tech Digest gives an in-depth look at six emerging cyber threats that enterprises could face in 2020. Download your copy today!
Flash Poll
How Enterprises Are Developing and Maintaining Secure Applications
How Enterprises Are Developing and Maintaining Secure Applications
The concept of application security is well known, but application security testing and remediation processes remain unbalanced. Most organizations are confident in their approach to AppSec, although others seem to have no approach at all. Read this report to find out more.
Twitter Feed
Dark Reading - Bug Report
Bug Report
Enterprise Vulnerabilities
From DHS/US-CERT's National Vulnerability Database
CVE-2020-8818
PUBLISHED: 2020-02-25
An issue was discovered in the CardGate Payments plugin through 2.0.30 for Magento 2. Lack of origin authentication in the IPN callback processing function in Controller/Payment/Callback.php allows an attacker to remotely replace critical plugin settings (merchant ID, secret key, etc.) and therefore...
CVE-2020-8819
PUBLISHED: 2020-02-25
An issue was discovered in the CardGate Payments plugin through 3.1.15 for WooCommerce. Lack of origin authentication in the IPN callback processing function in cardgate/cardgate.php allows an attacker to remotely replace critical plugin settings (merchant ID, secret key, etc.) and therefore bypass ...
CVE-2020-9385
PUBLISHED: 2020-02-25
A NULL Pointer Dereference exists in libzint in Zint 2.7.1 because multiple + characters are mishandled in add_on in upcean.c, when called from eanx in upcean.c during EAN barcode generation.
CVE-2020-9382
PUBLISHED: 2020-02-24
An issue was discovered in the Widgets extension through 1.4.0 for MediaWiki. Improper title sanitization allowed for the execution of any wiki page as a widget (as defined by this extension) via MediaWiki's } parser function.
CVE-2020-1938
PUBLISHED: 2020-02-24
When using the Apache JServ Protocol (AJP), care must be taken when trusting incoming connections to Apache Tomcat. Tomcat treats AJP connections as having higher trust than, for example, a similar HTTP connection. If such connections are available to an attacker, they can be exploited in ways that ...