Threat Intelligence

News & Commentary
IoT Deployment Security Top Concern for Enterprises
Dark Reading Staff, Quick Hits
A new survey shows that 63% of respondents are worried about the impact of the Internet of Things on corporate security technologies and processes.
By Dark Reading Staff , 10/19/2017
Comment0 comments  |  Read  |  Post a Comment
New Locky Ransomware Strain Emerges
Dawn Kawamoto, Associate Editor, Dark ReadingNews
Latest version goes by the .asasin extension and is collecting information on users' computer operating system and IP address.
By Dawn Kawamoto Associate Editor, Dark Reading, 10/19/2017
Comment0 comments  |  Read  |  Post a Comment
'Hacker Door' Backdoor Resurfaces as RAT a Decade Later
Dark Reading Staff, Quick Hits
Sophisticated backdoor re-emerges as a RAT more than a decade after its 2004 public release, with updated advanced malicious functionality.
By Dark Reading Staff , 10/18/2017
Comment1 Comment  |  Read  |  Post a Comment
ATM Machine Malware Sold on Dark Web
Dark Reading Staff, Quick Hits
Cybercriminals are advertising ATM malware that's designed to exploit hardware and software vulnerabilities on the cash-dispensing machines.
By Dark Reading Staff , 10/17/2017
Comment0 comments  |  Read  |  Post a Comment
InfoSec Pros Among Worst Offenders of Employer Snooping
Dawn Kawamoto, Associate Editor, Dark ReadingNews
A majority of IT security professionals admit to trolling through company information unrelated to their work -- even sensitive material.
By Dawn Kawamoto Associate Editor, Dark Reading, 10/17/2017
Comment1 Comment  |  Read  |  Post a Comment
US Supreme Court to Hear Microsoft-DOJ Email Case
Dark Reading Staff, Quick Hits
High court to rule on email privacy case, pitting Redmond giant against DOJ over access to its foreign-based email servers.
By Dark Reading Staff , 10/16/2017
Comment0 comments  |  Read  |  Post a Comment
DHS to Require All Fed Agencies to Use DMARC, HTTPS, and STARTTLS
Dawn Kawamoto, Associate Editor, Dark ReadingNews
The move follows a DHS review of federal government agencies' steps to secure email and deploy authentication technologies.
By Dawn Kawamoto Associate Editor, Dark Reading, 10/16/2017
Comment0 comments  |  Read  |  Post a Comment
New Cybercrime Campaign a 'Clear and Imminent' Threat to Banks Worldwide
Kelly Jackson Higgins, Executive Editor at Dark ReadingNews
Hundreds of millions of dollars stolen from banks via an sophisticated attack that blended cyber and physical elements.
By Kelly Jackson Higgins Executive Editor at Dark Reading, 10/16/2017
Comment0 comments  |  Read  |  Post a Comment
Adobe Patches Flash ZeroDay Used To Plant Surveillance Software
Dark Reading Staff, Quick Hits
Second time in four weeks FINSPY "lawful intercept" tool and a zero-day found together.
By Dark Reading Staff , 10/16/2017
Comment0 comments  |  Read  |  Post a Comment
DoubleLocker Delivers Unique Two-Punch Hit to Android
Dawn Kawamoto, Associate Editor, Dark ReadingNews
Combines Android ransomware with capability to change users device PINs.
By Dawn Kawamoto Associate Editor, Dark Reading, 10/13/2017
Comment0 comments  |  Read  |  Post a Comment
Hyatt Hit With Another Credit Card Breach
Dark Reading Staff, Quick Hits
Payment card information stolen when cards were either swiped or manually entered into registration systems at some Hyatt hotels.
By Dark Reading Staff , 10/13/2017
Comment2 comments  |  Read  |  Post a Comment
Getting the Most Out of Cyber Threat Intelligence
Robert M. Lee, SANS Instructor & CEO, Dragos, Inc.Commentary
How security practitioners can apply structured analysis and move from putting out fires to fighting the arsonists.
By Robert M. Lee SANS Instructor & CEO, Dragos, Inc., 10/13/2017
Comment0 comments  |  Read  |  Post a Comment
Coalition to Offer Free Business Email Compromise Workshops
Dark Reading Staff, Quick Hits
A coalition of federal law enforcement agencies, ISACs, and Symantec will offer BEC workshops in a dozen cities.
By Dark Reading Staff , 10/12/2017
Comment0 comments  |  Read  |  Post a Comment
Equifax Now Faces Potential Breach of Customer Help Page
Dark Reading Staff, Quick Hits
Embattled credit-monitoring company takes down help page that reportedly redirects users to download a bogus software update.
By Dark Reading Staff , 10/12/2017
Comment2 comments  |  Read  |  Post a Comment
Olympic Games Face Greater Cybersecurity Risks
Dawn Kawamoto, Associate Editor, Dark ReadingNews
Cybercriminals may alter score results and engage in launching physical attacks at future Olympic Games, a recently released report warns.
By Dawn Kawamoto Associate Editor, Dark Reading, 10/12/2017
Comment0 comments  |  Read  |  Post a Comment
Cybersecurity's 'Broken' Hiring Process
Kelly Jackson Higgins, Executive Editor at Dark ReadingNews
New study shows the majority of cybersecurity positions get filled at salaries above the original compensation cap, while jobs sit unfilled an average of six months.
By Kelly Jackson Higgins Executive Editor at Dark Reading, 10/11/2017
Comment12 comments  |  Read  |  Post a Comment
Akamai Acquires Nominum
Dark Reading Staff, Quick Hits
Purchase of DNS and enterprise cybersecurity solutions company is designed to bolster Akamai's offering to telecom carriers.
By Dark Reading Staff , 10/11/2017
Comment0 comments  |  Read  |  Post a Comment
Can Machine Learning Outsmart Malware?
Aviram Zrahia, Cyber Security Consulting Engineer, Juniper Networks
Using machine learning in the cybersecurity domain is a growing trend with many advantages, but it also has its risks.
By Aviram Zrahia Cyber Security Consulting Engineer, Juniper Networks, 10/11/2017
Comment0 comments  |  Read  |  Post a Comment
Ransomware Sales on the Dark Web Spike 2,502% in 2017
Dawn Kawamoto, Associate Editor, Dark ReadingNews
Sales soar to $6.2 million as do-it-yourself kits, ransomware-as-a-service, and distribution offerings take hold.
By Dawn Kawamoto Associate Editor, Dark Reading, 10/11/2017
Comment1 Comment  |  Read  |  Post a Comment
Cybercrime Meets Culture In Middle East, North African Underground
Jai Vijayan, Freelance writerNews
Spirit of sharing and free malware a characteristic of crimeware markets in this region, Trend Micro says.
By Jai Vijayan Freelance writer, 10/10/2017
Comment0 comments  |  Read  |  Post a Comment
More Stories
Current Conversations
Posted by LacyLoving
Current Conversations nice
In reply to: nice
Post Your Own Reply
More Conversations
20 Questions to Ask Yourself before Giving a Security Conference Talk
Joshua Goldfarb, Co-founder & Chief Product Officer, IDDRA,  10/16/2017
Printers: The Weak Link in Enterprise Security
Kelly Sheridan, Associate Editor, Dark Reading,  10/16/2017
Hyatt Hit With Another Credit Card Breach
Dark Reading Staff 10/13/2017
Register for Dark Reading Newsletters
White Papers
Video
Cartoon Contest
Current Issue
Security Vulnerabilities: The Next Wave
Just when you thought it was safe, researchers have unveiled a new round of IT security flaws. Is your enterprise ready?
[Strategic Security Report] How Enterprises Are Attacking the IT Security Problem
[Strategic Security Report] How Enterprises Are Attacking the IT Security Problem
Enterprises are spending more of their IT budgets on cybersecurity technology. How do your organization's security plans and strategies compare to what others are doing? Here's an in-depth look.
Twitter Feed
Dark Reading - Bug Report
Bug Report
Enterprise Vulnerabilities
From DHS/US-CERT's National Vulnerability Database
CVE-2017-0290
Published: 2017-05-09
NScript in mpengine in Microsoft Malware Protection Engine with Engine Version before 1.1.13704.0, as used in Windows Defender and other products, allows remote attackers to execute arbitrary code or cause a denial of service (type confusion and application crash) via crafted JavaScript code within ...

CVE-2016-10369
Published: 2017-05-08
unixsocket.c in lxterminal through 0.3.0 insecurely uses /tmp for a socket file, allowing a local user to cause a denial of service (preventing terminal launch), or possibly have other impact (bypassing terminal access control).

CVE-2016-8202
Published: 2017-05-08
A privilege escalation vulnerability in Brocade Fibre Channel SAN products running Brocade Fabric OS (FOS) releases earlier than v7.4.1d and v8.0.1b could allow an authenticated attacker to elevate the privileges of user accounts accessing the system via command line interface. With affected version...

CVE-2016-8209
Published: 2017-05-08
Improper checks for unusual or exceptional conditions in Brocade NetIron 05.8.00 and later releases up to and including 06.1.00, when the Management Module is continuously scanned on port 22, may allow attackers to cause a denial of service (crash and reload) of the management module.

CVE-2017-0890
Published: 2017-05-08
Nextcloud Server before 11.0.3 is vulnerable to an inadequate escaping leading to a XSS vulnerability in the search module. To be exploitable a user has to write or paste malicious content into the search dialogue.