Upcoming Webinars

Webinar Archives
New Security Strategies for the Cloud Services Environment
Date: Dec 12, 2018
View webinar
In this panel discussion, cloud experts will offer advice and recommendations on how to approach the problem of cloud security in more advanced and practical ways - and how to prepare for cloud-focused attacks that may emerge in your environment.

Using Security Champions to Build a DevSecOps Culture Within Your Organization
Date: Dec 11, 2018
View webinar
Building security into application teams' culture is necessary for DevSecOps to be successful. Outside the software security group, Security Champions are the leaders of this cultural change.

Developing a Customized Defense Against Targeted Attacks
Date: Dec 06, 2018
View webinar
Join us and learn how to predict where targeted attackers will hit you hardest and how to tune your defenses accordingly.

Understanding Evil Twin AP Attacks and How to Prevent Them
Ryan Orsi, Director of Product Management for Wi-Fi at WatchGuard Technologies,  11/14/2018
Veterans Find New Roles in Enterprise Cybersecurity
Kelly Sheridan, Staff Editor, Dark Reading,  11/12/2018
2018 on Track to Be One of the Worst Ever for Data Breaches
Jai Vijayan, Freelance writer,  11/12/2018
Register for Dark Reading Newsletters
White Papers
Video
Cartoon
Current Issue
Flash Poll
Online Malware and Threats: A Profile of Today's Security Posture
Online Malware and Threats: A Profile of Today's Security Posture
This report offers insight on how security professionals plan to invest in cybersecurity, and how they are prioritizing their resources. Find out what your peers have planned today!
Twitter Feed
Dark Reading - Bug Report
Bug Report
Enterprise Vulnerabilities
From DHS/US-CERT's National Vulnerability Database
CVE-2018-1639
PUBLISHED: 2018-11-16
The Report Builder of Jazz Reporting Service 5.0 through 5.0.2 and 6.0 through 6.0.6 could allow an authenticated user to obtain sensitive information beyond its assigned privileges. IBM X-Force ID: 144579.
CVE-2018-1797
PUBLISHED: 2018-11-16
IBM WebSphere Application Server 7.0, 8.0, 8.5, and 9.0 using Enterprise bundle Archives (EBA) could allow a local attacker to traverse directories on the system. By persuading a victim to extract a specially-crafted ZIP archive containing "dot dot slash" sequences (../), an attacker could...
CVE-2018-7359
PUBLISHED: 2018-11-16
All versions up to V1.1.10P3T18 of ZTE ZXHN F670 product are impacted by heap-based buffer overflow vulnerability, which may allow an attacker to execute arbitrary code.
CVE-2018-7360
PUBLISHED: 2018-11-16
All versions up to V1.1.10P3T18 of ZTE ZXHN F670 product are impacted by information exposure vulnerability, which may allow an unauthenticated attacker to get the GPON SN information via appviahttp service.
CVE-2018-7361
PUBLISHED: 2018-11-16
All versions up to V1.1.10P3T18 of ZTE ZXHN F670 product are impacted by null pointer dereference vulnerability, which may allows an attacker to cause a denial of service.