Vulnerabilities / Threats

7/5/2018
09:00 AM
Steve Zurier
Steve Zurier
Slideshows
Connect Directly
Twitter
RSS
E-Mail

9 SMB Security Trends

SMBs understand they have to focus more on cybersecurity. Here's a look at the areas they say matter most.
2 of 10

1. Phishing Proliferates
Fear of phishing has displaced new forms of malware as the No. 1 attack global IT decision makers believe their organizations are most susceptible to this year, according to the Webroot study. While phishing has been around for years, SMBs - once seemingly under the radar - can no longer feel immune from such an attack; very often, the bad guys will phish an SMB as a way to gain entree into a larger enterprise customer. 
Image Source: Shutterstock via Maksim Kabakou

1. Phishing Proliferates

Fear of phishing has displaced new forms of malware as the No. 1 attack global IT decision makers believe their organizations are most susceptible to this year, according to the Webroot study. While phishing has been around for years, SMBs once seemingly under the radar can no longer feel immune from such an attack; very often, the bad guys will phish an SMB as a way to gain entre into a larger enterprise customer.

Image Source: Shutterstock via Maksim Kabakou

2 of 10
Comment  | 
Print  | 
Comments
Newest First  |  Oldest First  |  Threaded View
Joe Stanganelli
50%
50%
Joe Stanganelli,
User Rank: Ninja
7/5/2018 | 2:30:52 PM
Webroot, ransomware, and other malware
Interestingly, Webroot has identified another issue with ransomware and security trends. In a conversation I had with one of their marketing people not long ago, I was told that Webroot had found that a lot of laypeople do not often do not necessarily identify ransomware as a virus or malware -- thus leading the company to explicitly mention and include ransomware in a recent survey asking people's experiences with malware.
White House Cybersecurity Strategy at a Crossroads
Kelly Jackson Higgins, Executive Editor at Dark Reading,  7/17/2018
The Fundamental Flaw in Security Awareness Programs
Ira Winkler, CISSP, President, Secure Mentem,  7/19/2018
Register for Dark Reading Newsletters
White Papers
Video
Cartoon Contest
Current Issue
Flash Poll
Twitter Feed
Dark Reading - Bug Report
Bug Report
Enterprise Vulnerabilities
From DHS/US-CERT's National Vulnerability Database
CVE-2018-14492
PUBLISHED: 2018-07-21
Tenda AC7 through V15.03.06.44_CN, AC9 through V15.03.05.19(6318)_CN, and AC10 through V15.03.06.23_CN devices have a Stack-based Buffer Overflow via a long limitSpeed or limitSpeedup parameter to an unspecified /goform URI.
CVE-2018-3770
PUBLISHED: 2018-07-20
A path traversal exists in markdown-pdf version <9.0.0 that allows a user to insert a malicious html code that can result in reading the local files.
CVE-2018-3771
PUBLISHED: 2018-07-20
An XSS in statics-server <= 0.0.9 can be used via injected iframe in the filename when statics-server displays directory index in the browser.
CVE-2018-5065
PUBLISHED: 2018-07-20
Adobe Acrobat and Reader 2018.011.20040 and earlier, 2017.011.30080 and earlier, and 2015.006.30418 and earlier versions have a Use-after-free vulnerability. Successful exploitation could lead to arbitrary code execution in the context of the current user.
CVE-2018-5066
PUBLISHED: 2018-07-20
Adobe Acrobat and Reader 2018.011.20040 and earlier, 2017.011.30080 and earlier, and 2015.006.30418 and earlier versions have an Out-of-bounds read vulnerability. Successful exploitation could lead to information disclosure.