Dark Reading is part of the Informa Tech Division of Informa PLC

This site is operated by a business or businesses owned by Informa PLC and all copyright resides with them.Informa PLC's registered office is 5 Howick Place, London SW1P 1WG. Registered in England and Wales. Number 8860726.

Vulnerabilities / Threats

Dark Reading's Seven-Year Itch

After seven years of covering the security industry, Dark Reading is just getting started

Seven years ago today, Dark Reading made its first appearance on the Web. The publication, like the security industry itself, has changed a great deal since May 1, 2006 -- and yet, as with the industry, many core themes remain constant.

When we launched Dark Reading, our goal was to build a single website where security professionals could go to find all of the information they needed about new threats and methods for stopping them.

In those days, nobody was talking about the cloud or advanced persistent threats or bring your own device. One of the biggest breaches that year was at the Department of Veterans Affairs, where an employee brought work home on a laptop that was subsequently stolen. One of our most popular stories was a penetration test by blogger Steve Stasiukonis, who put a benign infection on a bunch of thumb drives and placed them all over a company headquarters site (almost all of them were plugged into company computers).

Over the years, businesses have been inundated with new attacks ranging from Stuxnet to Storm, from Anonymous to Zeus. And yet, those lost laptops and infected thumb drives continue to be a problem for most enterprises.

In 2006, we were writing about the features of antivirus and IPS products, noting their particular flaws and inability to prevent attacks from penetrating. The integrity of the security perimeter was at risk.

Since then, we've seen the launch of a wide range of technologies and strategies, from next-generation firewalls to data leak prevention to threat intelligence services. And yet, experts are still complaining about the failure of AV technology, and most have all but given up the idea of maintaining a secure perimeter.

Perhaps the lesson we're taught from the past seven years is that while attacks and technology change, the nature of security itself doesn't. We may be dealing with an unprecedented volume and sophistication of malware, but that doesn't change the fact that humans are at the heart of most of our defenses -- and most of our compromises. And security, like everything else that's human, is a work in progress.

For Dark Reading's part, our pledge is to continue to strive to be that single source of news and information that you need in your efforts as a security professional. We've taken some steps recently to improve our content, such as the redesign launched in April, and we have more plans in store for improving the usefulness and interactivity of the site. We have an itch to take this site to a new level, and we look forward to the days ahead.

And for those of you who have been reading us over these past seven years, thank you. We hope we'll continue to be one of your primary sites for security news and information for another seven years -- and beyond.

--Tim Wilson, Kelly Jackson Higgins, and the staff and contributors of Dark Reading Tim Wilson is Editor in Chief and co-founder of Dark Reading.com, UBM Tech's online community for information security professionals. He is responsible for managing the site, assigning and editing content, and writing breaking news stories. Wilson has been recognized as one ... View Full Bio

Comment  | 
Print  | 
More Insights
Comments
Threaded  |  Newest First  |  Oldest First
jc
50%
50%
jc,
User Rank: Apprentice
5/2/2013 | 3:14:37 PM
re: Dark Reading's Seven-Year Itch
Happy Birthday Dark Reading!
Mobile Banking Malware Up 50% in First Half of 2019
Kelly Sheridan, Staff Editor, Dark Reading,  1/17/2020
Exploits Released for As-Yet Unpatched Critical Citrix Flaw
Jai Vijayan, Contributing Writer,  1/13/2020
Microsoft to Officially End Support for Windows 7, Server 2008
Kelly Sheridan, Staff Editor, Dark Reading,  1/13/2020
Register for Dark Reading Newsletters
White Papers
Video
Cartoon Contest
Write a Caption, Win a Starbucks Card! Click Here
Latest Comment: This comment is waiting for review by our moderators.
Current Issue
The Year in Security: 2019
This Tech Digest provides a wrap up and overview of the year's top cybersecurity news stories. It was a year of new twists on old threats, with fears of another WannaCry-type worm and of a possible botnet army of Wi-Fi routers. But 2019 also underscored the risk of firmware and trusted security tools harboring dangerous holes that cybercriminals and nation-state hackers could readily abuse. Read more.
Flash Poll
[Just Released] How Enterprises are Attacking the Cybersecurity Problem
[Just Released] How Enterprises are Attacking the Cybersecurity Problem
Organizations have invested in a sweeping array of security technologies to address challenges associated with the growing number of cybersecurity attacks. However, the complexity involved in managing these technologies is emerging as a major problem. Read this report to find out what your peers biggest security challenges are and the technologies they are using to address them.
Twitter Feed
Dark Reading - Bug Report
Bug Report
Enterprise Vulnerabilities
From DHS/US-CERT's National Vulnerability Database
CVE-2020-7227
PUBLISHED: 2020-01-18
Westermo MRD-315 1.7.3 and 1.7.4 devices have an information disclosure vulnerability that allows an authenticated remote attacker to retrieve the source code of different functions of the web application via requests that lack certain mandatory parameters. This affects ifaces-diag.asp, system.asp, ...
CVE-2019-15625
PUBLISHED: 2020-01-18
A memory usage vulnerability exists in Trend Micro Password Manager 3.8 that could allow an attacker with access and permissions to the victim's memory processes to extract sensitive information.
CVE-2019-19696
PUBLISHED: 2020-01-18
A RootCA vulnerability found in Trend Micro Password Manager for Windows and macOS exists where the localhost.key of RootCA.crt might be improperly accessed by an unauthorized party and could be used to create malicious self-signed SSL certificates, allowing an attacker to misdirect a user to phishi...
CVE-2019-19697
PUBLISHED: 2020-01-18
An arbitrary code execution vulnerability exists in the Trend Micro Security 2019 (v15) consumer family of products which could allow an attacker to gain elevated privileges and tamper with protected services by disabling or otherwise preventing them to start. An attacker must already have administr...
CVE-2019-20357
PUBLISHED: 2020-01-18
A Persistent Arbitrary Code Execution vulnerability exists in the Trend Micro Security 2020 (v160 and 2019 (v15) consumer familiy of products which could potentially allow an attacker the ability to create a malicious program to escalate privileges and attain persistence on a vulnerable system.