Analytics //

Security Monitoring

Seeing Into Security 'Blind Spots' With Bay Dynamics' Gautam Aggarwal

100%
0%

Gautam Aggarwal, CMO of Bay Dynamics, visits Dark Reading News Desk to explain that its important to not just develop a cybersecurity strategy, but to also better understand what your security blind spots are so you can effectively manage risk.

Comment  | 
Print  | 
Comments
Newest First  |  Oldest First  |  Threaded View
s_phish
50%
50%
s_phish,
User Rank: Apprentice
9/1/2015 | 1:07:56 PM
Interesting product
UBAs are a very up and coming topic. This looks like some interesting stuff and a new approach to security. I am curious to see how this company moves forward in the space. How come no one has thought of this before?
mattwilliamsfromseattle
50%
50%
mattwilliamsfromseattle,
User Rank: Apprentice
8/31/2015 | 10:59:05 PM
Blind Spot Visibility
It is interesting to work in cybersecurity to see how the less "mature" organizations, oftentimes will think they have less blindspots.
securityfirst
50%
50%
securityfirst,
User Rank: Apprentice
8/31/2015 | 8:36:47 PM
Its good to know what you don't know!
Interesting perspective. What keeps me up at night as a security practitioner is the "I don't know what I don't know' set of facts. Just yesterday was having a talk with some senior executives about vendors in our eco systems. How much we depend on that but also how they can be our weakest link when it comes to cyberseurity.  

 

 
Election Websites, Back-End Systems Most at Risk of Cyberattack in Midterms
Kelly Jackson Higgins, Executive Editor at Dark Reading,  8/14/2018
Intel Reveals New Spectre-Like Vulnerability
Curtis Franklin Jr., Senior Editor at Dark Reading,  8/15/2018
Register for Dark Reading Newsletters
White Papers
Video
Cartoon Contest
Current Issue
Flash Poll
Twitter Feed
Dark Reading - Bug Report
Bug Report
Enterprise Vulnerabilities
From DHS/US-CERT's National Vulnerability Database
CVE-2018-3783
PUBLISHED: 2018-08-17
A privilege escalation detected in flintcms versions <= 1.1.9 allows account takeover due to blind MongoDB injection in password reset.
CVE-2018-3784
PUBLISHED: 2018-08-17
A code injection in cryo 0.0.6 allows an attacker to arbitrarily execute code due to insecure implementation of deserialization.
CVE-2018-3785
PUBLISHED: 2018-08-17
A command injection in git-dummy-commit v1.3.0 allows os level commands to be executed due to an unescaped parameter.
CVE-2018-10873
PUBLISHED: 2018-08-17
A vulnerability was discovered in SPICE before version 0.14.1 where the generated code used for demarshalling messages lacked sufficient bounds checks. A malicious client or server, after authentication, could send specially crafted messages to its peer which would result in a crash or, potentially,...
CVE-2018-5546
PUBLISHED: 2018-08-17
The svpn and policyserver components of the F5 BIG-IP APM client prior to version 7.1.7.1 for Linux and macOS runs as a privileged process and can allow an unprivileged user to get ownership of files owned by root on the local client host. A malicious local unprivileged user may gain knowledge of se...