Dark Reading is part of the Informa Tech Division of Informa PLC

This site is operated by a business or businesses owned by Informa PLC and all copyright resides with them.Informa PLC's registered office is 5 Howick Place, London SW1P 1WG. Registered in England and Wales. Number 8860726.

Vulnerabilities / Threats

1/8/2018
10:48 AM
50%
50%

US Gov Outlines Steps to Fight Botnets, Automated Threats

The US Departments of Commerce and Homeland Security identify the challenges of, and potential actions against, automated cyberattacks.

The US Departments of Commerce and Homeland Security have published a report focused on the challenges and steps toward fighting botnets and other automated, distributed threats, the National Institute of Standards and Technology (NIST) announced last week.

Their report is a response to Executive Order 13800, Strengthening the Cybersecurity of Federal Networks and Critical Infrastructure. The EO directed the Secretaries of Commerce and Homeland Security to "lead an open and transparent process to identify and promote action by the appropriate stakeholders" in order to reduce automated and distributed cyberattacks.

In a joint effort, the two departments drafted the opportunities and challenges in reducing the threat of automated attacks. Key themes of their report include acknowledging automated attacks are a global problem, effective tools exist but are not widely used, education and awareness is needed, and market incentives are misaligned.

They also created a list of goals to reduce the threat. These include identifying a clear path toward a secure tech marketplace, promoting infrastructure innovation to adapt to evolving threats, and promoting network innovation to prevent and detect threats.

A final report will be submitted by May 11. Read more details here.

Dark Reading's Quick Hits delivers a brief synopsis and summary of the significance of breaking news events. For more information from the original source of the news item, please follow the link provided in this article. View Full Bio

Comment  | 
Print  | 
More Insights
Comments
Newest First  |  Oldest First  |  Threaded View
The Flaw in Vulnerability Management: It's Time to Get Real
Jim Souders, Chief Executive Officer at Adaptiva,  8/15/2019
5 Ways to Improve the Patching Process
Kacy Zurkus, Contributing Writer,  8/20/2019
Register for Dark Reading Newsletters
White Papers
Video
Cartoon
Current Issue
7 Threats & Disruptive Forces Changing the Face of Cybersecurity
This Dark Reading Tech Digest gives an in-depth look at the biggest emerging threats and disruptive forces that are changing the face of cybersecurity today.
Flash Poll
The State of IT Operations and Cybersecurity Operations
The State of IT Operations and Cybersecurity Operations
Your enterprise's cyber risk may depend upon the relationship between the IT team and the security team. Heres some insight on what's working and what isn't in the data center.
Twitter Feed
Dark Reading - Bug Report
Bug Report
Enterprise Vulnerabilities
From DHS/US-CERT's National Vulnerability Database
CVE-2019-15314
PUBLISHED: 2019-08-22
tiki/tiki-upload_file.php in Tiki 18.4 allows remote attackers to upload JavaScript code that is executed upon visiting a tiki/tiki-download_file.php?display&fileId= URI.
CVE-2019-15317
PUBLISHED: 2019-08-22
The give plugin before 2.4.7 for WordPress has XSS via a donor name.
CVE-2019-15318
PUBLISHED: 2019-08-22
The yikes-inc-easy-mailchimp-extender plugin before 6.5.3 for WordPress has code injection via the admin input field.
CVE-2016-10921
PUBLISHED: 2019-08-22
The gallery-photo-gallery plugin before 1.0.1 for WordPress has SQL injection.
CVE-2017-18570
PUBLISHED: 2019-08-22
The cforms2 plugin before 14.13 for WordPress has SQL injection in the tracking DB GUI via Delete Entries or Download Entries.