Author

 Samuel Visner & Beth Musumeci
Twitter
LinkedIn
RSS
E-Mail

Profile of Samuel Visner & Beth Musumeci

Senior VP, General Manager & Senior VP, ICF Commercial Cybersecurity Practice
News & Commentary Posts: 1

Samuel Visner joined ICF in 2014 and has more than 35 years of experience in the national security and cybersecurity domains for the private sector and for the US federal government. Previously, Sam was vice president and general manager of CSC Global Cybersecurity and was senior vice president at SAIC. Sam also served as chief, signals intelligence programs, at the National Security Agency.  Sam is actively involved in and provides leadership to industry organizations, including the National Intelligence Council, the Cyber R&D Task Force of the Intelligence, National Security Alliance and Cyber Committee of the Armed Forces Communications, and Electronics Association.

Sam presents and writes on cybersecurity issues and is an adjunct professor at Georgetown University where he teaches cybersecurity policy and operations. He has a master's degree in telecommunications from George Washington University and a bachelor's degree in international politics from Georgetown University

Beth Musumeci is the senior vice president of ICF's commercial cybersecurity practice.  She joined ICF International in 2015 and has more than 20 years of experience in cybersecurity work for the private sector and for the US federal government. Prior to ICF, Beth led strategy and transformation, and was the general manager for CSC's global commercial cyber security practice.  She was an early pioneer in establishing security operations centers, and led the establishment of their global logical security operations center spanning five continents and serving hundreds of customers. 

Early in her career, Beth was a practitioner in the chemical, energy and natural resources industry as a lead information risk manager.  She began her career at the DuPont Company. Beth is based in Delaware and travels globally to foster partnerships and serve as a trusted advisor to clients worldwide.

 

Articles by Samuel Visner & Beth Musumeci
Election Websites, Back-End Systems Most at Risk of Cyberattack in Midterms
Kelly Jackson Higgins, Executive Editor at Dark Reading,  8/14/2018
Intel Reveals New Spectre-Like Vulnerability
Curtis Franklin Jr., Senior Editor at Dark Reading,  8/15/2018
Register for Dark Reading Newsletters
White Papers
Video
Cartoon Contest
Current Issue
Flash Poll
Twitter Feed
Dark Reading - Bug Report
Bug Report
Enterprise Vulnerabilities
From DHS/US-CERT's National Vulnerability Database
CVE-2018-13435
PUBLISHED: 2018-08-16
** DISPUTED ** An issue was discovered in the LINE jp.naver.line application 8.8.0 for iOS. The Passcode feature allows authentication bypass via runtime manipulation that forces a certain method to disable passcode authentication. NOTE: the vendor indicates that this is not an attack of interest w...
CVE-2018-13446
PUBLISHED: 2018-08-16
** DISPUTED ** An issue was discovered in the LINE jp.naver.line application 8.8.1 for Android. The Passcode feature allows authentication bypass via runtime manipulation that forces a certain method's return value to true. In other words, an attacker could authenticate with an arbitrary passcode. ...
CVE-2018-14567
PUBLISHED: 2018-08-16
libxml2 2.9.8, if --with-lzma is used, allows remote attackers to cause a denial of service (infinite loop) via a crafted XML file that triggers LZMA_MEMLIMIT_ERROR, as demonstrated by xmllint, a different vulnerability than CVE-2015-8035 and CVE-2018-9251.
CVE-2018-15122
PUBLISHED: 2018-08-16
An issue found in Progress Telerik JustAssembly through 2018.1.323.2 and JustDecompile through 2018.2.605.0 makes it possible to execute code by decompiling a compiled .NET object (such as DLL or EXE) with an embedded resource file by clicking on the resource.
CVE-2018-11509
PUBLISHED: 2018-08-16
ASUSTOR ADM 3.1.0.RFQ3 uses the same default root:admin username and password as it does for the NAS itself for applications that are installed from the online repository. This may allow an attacker to login and upload a webshell.