Vulnerabilities / Threats //

Advanced Threats

8/14/2015
09:00 AM
Sara Peters
Sara Peters
Slideshows
Connect Directly
Twitter
RSS
E-Mail
50%
50%

View From The Top: Governments Role In Cybersecurity

At the DarkReading News Desk, live from Black Hat, industry experts Dan Kaminsky, Richard Bejtlich, Katie Moussouris, Paul Kurtz, and Rod Beckstrom talked about how government is hurting and could be helping infosec.
Previous
1 of 6
Next

Last week we debuted the Dark Reading Video News Desk, streaming live from Black Hat, featuring over 30 interviews with speakers, trainers, and sponsors from the conference. Over the coming weeks, all the individual interviews will be posted here on Dark Reading. 

In the meantime, here is a peek at some opinions about the geo-political aspects of cybersecurity shared at the News Desk by five industry thought leaders -- Richard Bejtlich, chief security strategist for FireEye; Dan Kaminsky, chief scientist and founder of White Ops; Paul Kurtz, CEO of TruSTAR and former cybersecurity advisor to the White House; Katie Moussouris, chief policy officer for HackerOne; and Rod Beckstrom, founding director of the U.S. National Cybersecurity Center and former CEO of ICANN.

 

Sara Peters is Senior Editor at Dark Reading and formerly the editor-in-chief of Enterprise Efficiency. Prior that she was senior editor for the Computer Security Institute, writing and speaking about virtualization, identity management, cybersecurity law, and a myriad ... View Full Bio

Previous
1 of 6
Next
Comment  | 
Print  | 
More Insights
Comments
Newest First  |  Oldest First  |  Threaded View
Joe Stanganelli
50%
50%
Joe Stanganelli,
User Rank: Ninja
8/24/2015 | 4:52:29 PM
Katie Moussouris
I had the pleasure of seeing Katie Moussouris speak on a cybersecurity panel at an event in Boston in November.  She is definitely all about reducing restrictions (legal and otherwise) that disincentivize white-hat hackers -- and had a lot to say about how companies can improve their security posture by welcoming security researchers who discover exploits in their software with open arms (citing her former employer, Microsoft, as a great example of this in how the company handled hacking group Last Stage of Delirium's exploitation of the Blaster worm (the company hired them)).
Election Websites, Back-End Systems Most at Risk of Cyberattack in Midterms
Kelly Jackson Higgins, Executive Editor at Dark Reading,  8/14/2018
Intel Reveals New Spectre-Like Vulnerability
Curtis Franklin Jr., Senior Editor at Dark Reading,  8/15/2018
Data Privacy Careers Are Helping to Close the IT Gender Gap
Dana Simberkoff, Chief Compliance and Risk Management Officer, AvePoint, Inc,  8/20/2018
Register for Dark Reading Newsletters
White Papers
Video
Cartoon
Current Issue
Flash Poll
The State of Ransomware
The State of Ransomware
Ransomware has become one of the most prevalent new cybersecurity threats faced by today's enterprises. This new report from Dark Reading includes feedback from IT and IT security professionals about their organization's ransomware experiences, defense plans, and malware challenges. Find out what they had to say!
Twitter Feed
Dark Reading - Bug Report
Bug Report
Enterprise Vulnerabilities
From DHS/US-CERT's National Vulnerability Database
CVE-2018-15601
PUBLISHED: 2018-08-21
apps/filemanager/handlers/upload/drop.php in Elefant CMS 2.0.3 performs a urldecode step too late in the "Cannot upload executable files" protection mechanism.
CVE-2018-15603
PUBLISHED: 2018-08-21
An issue was discovered in Victor CMS through 2018-05-10. There is XSS via the Author field of the "Leave a Comment" screen.
CVE-2018-15598
PUBLISHED: 2018-08-21
Containous Traefik 1.6.x before 1.6.6, when --api is used, exposes the configuration and secret if authentication is missing and the API's port is publicly reachable.
CVE-2018-15599
PUBLISHED: 2018-08-21
The recv_msg_userauth_request function in svr-auth.c in Dropbear through 2018.76 is prone to a user enumeration vulnerability because username validity affects how fields in SSH_MSG_USERAUTH messages are handled, a similar issue to CVE-2018-15473 in an unrelated codebase.
CVE-2018-0501
PUBLISHED: 2018-08-21
The mirror:// method implementation in Advanced Package Tool (APT) 1.6.x before 1.6.4 and 1.7.x before 1.7.0~alpha3 mishandles gpg signature verification for the InRelease file of a fallback mirror, aka mirrorfail.