Dark Reading is part of the Informa Tech Division of Informa PLC

This site is operated by a business or businesses owned by Informa PLC and all copyright resides with them.Informa PLC's registered office is 5 Howick Place, London SW1P 1WG. Registered in England and Wales. Number 8860726.

News & Commentary

Latest Content
Page 1 / 2   >   >>
Research Casts Doubt on Value of Threat Intel Feeds
News  |  8/14/2020  | 
Two commercial threat intelligence services and four open source feeds rarely provide the same information, raising questions about how security teams should gauge their utility.
IcedID Shows Obfuscation Sophistication in New Campaign
Quick Hits  |  8/14/2020  | 
The malware's developers have turned to dynamic link libraries (DLLs) to hide their work.
DHS CISA Warns of Phishing Emails Rigged with KONNI Malware
Quick Hits  |  8/14/2020  | 
Konni is a remote administration tool cyberattackers use to steal files, capture keystrokes, take screenshots, and execute malicious code.
7 Ways to Keep Your Remote Workforce Safe
Slideshows  |  8/14/2020  | 
These tips will help you chart a course for a security strategy that just may become part of the normal way organizations will function over the next several years.
WFH Summer 2020 Caption Contest Winners
Commentary  |  8/14/2020  | 
Clever wordplay on sandcastles, sandboxes, zero trust. and granular controls. And the winners are ...
COVID-19: Latest Security News & Commentary
News  |  8/14/2020  | 
Check out Dark Reading's updated, exclusive news and commentary surrounding the coronavirus pandemic.
CISA Warns of Phishing Campaign with Loan-Relief Lure
Quick Hits  |  8/13/2020  | 
Phishing emails and fake website promise help with the Small Business Administration's program that aids those affected by COVID-19.
Healthcare Industry Sees Respite From Attacks in First Half of 2020
News  |  8/13/2020  | 
Breach disclosures are down, and reported ransomware attacks have also plummeted. Good news -- or a calm before the storm?
Business Email Compromise Attacks Involving MFA Bypass Increase
News  |  8/13/2020  | 
Adversaries are using legacy email clients to access and take over accounts protected with strong authentication, Abnormal Security says.
RedCurl APT Group Hacks Global Companies for Corporate Espionage
News  |  8/13/2020  | 
Researchers analyze a presumably Russian-speaking APT group that has been stealing corporate data since 2018.
The Race to Hack a Satellite at DEF CON
News  |  8/13/2020  | 
Eight teams competed to win cash, bragging rights, and the chance to control a satellite in space.
Boeing's DEF CON Debut a Sign of the Times
News  |  8/13/2020  | 
In the wake of a stalemate between the airplane manufacturer and a security researcher over vulns found in its 787 aircraft's network, Boeing says it's ready to "embrace" the hacker community.
Secure Development Takes a (Remote) Village
Commentary  |  8/13/2020  | 
The shift to work from home isn't just about giving your Dev team the physical tools they need.
NSA & FBI Disclose New Russian Cyberespionage Malware
Quick Hits  |  8/13/2020  | 
APT 28, aka Fancy Bear, is deploying the Drovorub malware designed for Linux systems as part of cyber-espionage operations.
Black Hat USA 2020 Shines Spotlight on the Mental Challenges of Cybersecurity
Commentary  |  8/13/2020  | 
Infosec practitioners face a variety of mental struggles in areas such as awareness training, problem solving, or general mental health. Several sessions at Black Hat USA 2020 highlighted these challenges and how to overcome them.
With iOS's Privacy Nutrition Label, Apple Upstages Regulators
Commentary  |  8/13/2020  | 
New iOS privacy features require developers to disclose what data they're collecting, how they're using it, and with whom they share it.
Adaptive Shield Emerges From Stealth
News  |  8/13/2020  | 
Israeli startup joins growing number of vendors offering platform for detecting and mitigating common configuration errors in cloud environments.
Emotet Return Brings New Tactics & Evasion Techniques
News  |  8/13/2020  | 
Security researchers tracking Emotet report its reemergence brings new tricks, including new evasion techniques to bypass security tools.
FireEye Announces New Bug-Bounty Program
Quick Hits  |  8/12/2020  | 
The program, administered by Bugcrowd, will pay bounties of up to $2,500 per vulnerability.
Using 'Data for Good' to Control the Pandemic
Commentary  |  8/12/2020  | 
The tech community should unite to develop and distribute a universal COVID-19 contact-tracing application. Here's why and how.
SANS Security Training Firm Hit with Data Breach
Quick Hits  |  8/12/2020  | 
A phishing email allowed an attacker to compromise a SANS employee's email environment, the organization reports.
Threats vs. Thrift: Running Effective AppSec During a Global Crisis
Commentary  |  8/12/2020  | 
By looking at security testing capacity, staff expertise, and risks throughout the software supply chain, application security teams can improve their overall effectiveness.
Kr00k, KRACK, and the Seams in Wi-Fi, IoT Encryption
News  |  8/12/2020  | 
Black Hat talk expands on research that uncovered more weaknesses in Wi-Fi chips allowing for the unauthorized decryption of traffic.
Researchers Trick Facial-Recognition Systems
News  |  8/11/2020  | 
Goal was to see if computer-generated images that look like one person would get classified as another person.
Microsoft Patches 120 Vulnerabilities, Two Zero-Days
News  |  8/11/2020  | 
The August 2020 Patch Tuesday marks the sixth month in a row Microsoft released patches for more than 110 vulnerabilities.
Developers Need More Usable Static Code Scanners to Head Off Security Bugs
News  |  8/11/2020  | 
As companies "shift left" -- pushing more responsibility for security onto developers -- the tools that are available are falling short, usability researchers say.
Symmetry Systems Emerges from Stealth
Quick Hits  |  8/11/2020  | 
Company behind Data Store and Object Security (DSOS) becomes public knowledge following a $3 million seed round of funding.
Zoom Vulnerabilities Demonstrated in DEF CON Talk
Quick Hits  |  8/11/2020  | 
A security researcher demonstrated multiple vulnerabilities, two of which could let an attacker read and steal user data.
Is Edtech the Greatest APT?
News  |  8/11/2020  | 
Educational technology is critical but can come at huge costs to student and teacher privacy and security. Are those costs too high?
EU-US Privacy Shield Dissolution: What Happens Next?
Commentary  |  8/11/2020  | 
In a world that isn't private by design, security and liability implications for US-based cloud companies are huge.
How to Help Spoil the Cybercrime Economy
Commentary  |  8/11/2020  | 
Cybercrime increasingly is turning into a commodity. Stolen PII data and hijacked cloud accounts especially propel the spread, research shows.
17 Essential Stats About the State of Consumer Privacy
Slideshows  |  8/11/2020  | 
These illuminating numbers offer a glimpse into current consumer attitudes and enterprise readiness for protecting their customers' personal data.
Gamifying Password Training Shows Security Benefits
News  |  8/10/2020  | 
When picking passwords, users often fall back on certain insecure patterns, but good habits can be learned using simple games, a group of researchers find.
Hacking It as a CISO: Advice for Security Leadership
News  |  8/10/2020  | 
A security leader shares tips for adopting a CISO mindset, creating risk management strategies, and "selling infosec" to IT and executives.
Better Business Bureau Warns of New Visa Scam
Quick Hits  |  8/10/2020  | 
Visa limitations due to the novel coronavirus have given rise to a wave of scams aimed at visa-seekers.
Lock-Pickers Face an Uncertain Future Online
News  |  8/10/2020  | 
Teaching the hardware hacker the skill of picking locks is evolving because of the pandemic's lockdown.
Q2 DDoS Attacks Triple Year Over Year: Report
Quick Hits  |  8/10/2020  | 
Distributed denial-of-service attacks have stayed consistently high throughout 2020, a shift from normal attack trends that researchers attribute to COVID-19.
Vulnerability Prioritization: Are You Getting It Right?
Commentary  |  8/10/2020  | 
Developers must find a way to zero in on the security vulns that present the most risk and quickly address them without slowing down the pace of development.
Digital Clones Could Cause Problems for Identity Systems
News  |  8/8/2020  | 
Three fundamental technologies -- chatbots, audio fakes, and deepfake videos -- have improved to the point that creating digital, real-time clones of people is merely a matter of integrating the systems.
Reddit Attack Defaces Dozens of Channels
Quick Hits  |  8/7/2020  | 
The attack has defaced the channels with images and content supporting Donald Trump.
Hacking the PLC via Its Engineering Software
News  |  8/7/2020  | 
Researcher will demonstrate at DEF CON an emerging threat to industrial control networks.
400+ Qualcomm Chip Vulnerabilities Threaten Millions of Android Phones
News  |  8/7/2020  | 
Security researchers found hundreds of pieces of vulnerable code in the Qualcomm Snapdragon chips powering Android phones.
Researcher Finds New Office Macro Attacks for MacOS
News  |  8/7/2020  | 
Building successful macro attacks means getting past several layers of security, but a Black Hat speaker found a way through.
BEC Campaigns Target Financial Execs via Office 365
Quick Hits  |  8/7/2020  | 
A series of business email compromise campaigns has been targeting executives of more than 1,000 companies, most recently in the US and Canada.
IoT Security During COVID-19: What We've Learned & Where We're Going
Commentary  |  8/7/2020  | 
Vigilance and ongoing training combined with an integrated security framework are key aspects of a successful strategy in the fight against the latest crop of pandemic opportunists.
Getting to the Root: How Researchers Identify Zero-Days in the Wild
News  |  8/6/2020  | 
Google Project Zero researcher Maddie Stone explains the importance of identifying flaws exploited in the wild and techniques used to do it.
Researchers Create New Framework to Evaluate User Security Awareness
News  |  8/6/2020  | 
Approaches based on questionnaires and self-evaluation are not always a good indicator of how well a user can mitigate social engineering threats.
A Mix of Optimism and Pessimism for Security of the 2020 Election
News  |  8/6/2020  | 
DHS CISA's Christopher Krebs and Georgetown University's Matt Blaze at Black Hat USA give the lowdown on where things stand and what still needs to happen to protect the integrity of November's election.
Dark Reading Video News Desk Returns to Black Hat
News  |  8/6/2020  | 
UPDATED: Coming to you prerecorded from in front of carefully arranged bookcases around the world ...!
Where Dark Reading Goes Next
News  |  8/6/2020  | 
Dark Reading Editor-in-Chief gives a complete rundown of all the Dark Reading projects you might not even know about, his insight into the future of the security industry, and how we plan to cover it.
Page 1 / 2   >   >>


COVID-19: Latest Security News & Commentary
Dark Reading Staff 8/14/2020
Lock-Pickers Face an Uncertain Future Online
Seth Rosenblatt, Contributing Writer,  8/10/2020
Hacking It as a CISO: Advice for Security Leadership
Kelly Sheridan, Staff Editor, Dark Reading,  8/10/2020
Register for Dark Reading Newsletters
White Papers
Video
Cartoon
Current Issue
7 New Cybersecurity Vulnerabilities That Could Put Your Enterprise at Risk
In this Dark Reading Tech Digest, we look at the ways security researchers and ethical hackers find critical vulnerabilities and offer insights into how you can fix them before attackers can exploit them.
Flash Poll
The Changing Face of Threat Intelligence
The Changing Face of Threat Intelligence
This special report takes a look at how enterprises are using threat intelligence, as well as emerging best practices for integrating threat intel into security operations and incident response. Download it today!
Twitter Feed
Dark Reading - Bug Report
Bug Report
Enterprise Vulnerabilities
From DHS/US-CERT's National Vulnerability Database
CVE-2020-17475
PUBLISHED: 2020-08-14
Lack of authentication in the network relays used in MEGVII Koala 2.9.1-c3s allows attackers to grant physical access to anyone by sending packet data to UDP port 5000.
CVE-2020-0255
PUBLISHED: 2020-08-14
** REJECT ** DO NOT USE THIS CANDIDATE NUMBER. ConsultIDs: CVE-2020-10751. Reason: This candidate is a duplicate of CVE-2020-10751. Notes: All CVE users should reference CVE-2020-10751 instead of this candidate. All references and descriptions in this candidate have been removed to prevent accidenta...
CVE-2020-14353
PUBLISHED: 2020-08-14
** REJECT ** DO NOT USE THIS CANDIDATE NUMBER. ConsultIDs: CVE-2017-18270. Reason: This candidate is a duplicate of CVE-2017-18270. Notes: All CVE users should reference CVE-2017-18270 instead of this candidate. All references and descriptions in this candidate have been removed to prevent accidenta...
CVE-2020-17464
PUBLISHED: 2020-08-14
** REJECT ** DO NOT USE THIS CANDIDATE NUMBER. ConsultIDs: none. Reason: This candidate was withdrawn by its CNA. Further investigation showed that it was not a security issue. Notes: none.
CVE-2020-17473
PUBLISHED: 2020-08-14
Lack of mutual authentication in ZKTeco FaceDepot 7B 1.0.213 and ZKBiosecurity Server 1.0.0_20190723 allows an attacker to obtain a long-lasting token by impersonating the server.