Vulnerabilities / Threats

12/1/2017
10:00 AM
Connect Directly
Twitter
Twitter
RSS
E-Mail
100%
0%

Security Geek Gift Guide

Fun gifts for cybersecurity co-workers and bosses alike.
Previous
1 of 10
Next

Deck the halls and get to shopping! It's that time of year again, but this time there's no need to scratch your head and desperately wonder what to get the security geeks in your life. We've got you covered with this gift guide, which offers up different ideas based on what kind of security pro you're shopping for. 

So kick back and check out these gift ideas. 

 

Ericka Chickowski specializes in coverage of information technology and business innovation. She has focused on information security for the better part of a decade and regularly writes about the security industry as a contributor to Dark Reading.  View Full Bio

Previous
1 of 10
Next
Comment  | 
Print  | 
More Insights
Comments
Newest First  |  Oldest First  |  Threaded View
Joe Stanganelli
50%
50%
Joe Stanganelli,
User Rank: Ninja
12/18/2017 | 7:14:20 PM
Password Notebook
FWIW, while the password notebook -- clearly labeled and marketed as such -- is utterly ridiculous, many cybersecurity experts have long been reversing the traditional wisdom and advising that people do write their passwords down...just so long as they don't store the written password in an open or obvious place (such as in a top desk drawer, stuck to a computer monitor or keyboard, or in a clearly marked "password notebook").

Of course, the whole purpose of writing down passwords as an enhanced security tactic is that it allows you to have better and more entropic passwords. If you're still going to have passwords like "jordan23" (let alone "password1" or "123456"), you're not doing yourself much good.
What We Talk About When We Talk About Risk
Jack Jones, Chairman, FAIR Institute,  7/11/2018
Ticketmaster Breach Part of Massive Payment Card Hacking Campaign
Jai Vijayan, Freelance writer,  7/10/2018
Register for Dark Reading Newsletters
White Papers
Video
Cartoon Contest
Write a Caption, Win a Starbucks Card! Click Here
Latest Comment: This comment is waiting for review by our moderators.
Current Issue
Flash Poll
Twitter Feed
Dark Reading - Bug Report
Bug Report
Enterprise Vulnerabilities
From DHS/US-CERT's National Vulnerability Database
CVE-2018-14072
PUBLISHED: 2018-07-15
libsixel 1.8.1 has a memory leak in sixel_decoder_decode in decoder.c, image_buffer_resize in fromsixel.c, and sixel_decode_raw in fromsixel.c.
CVE-2018-14073
PUBLISHED: 2018-07-15
libsixel 1.8.1 has a memory leak in sixel_allocator_new in allocator.c.
CVE-2018-14068
PUBLISHED: 2018-07-15
An issue was discovered in SRCMS V2.3.1. There is a CSRF vulnerability that can add an admin account via admin.php?m=Admin&c=manager&a=add.
CVE-2018-14069
PUBLISHED: 2018-07-15
An issue was discovered in SRCMS V2.3.1. There is a CSRF vulnerability that can add a user account via admin.php?m=Admin&c=member&a=add.
CVE-2018-14066
PUBLISHED: 2018-07-15
The content://wappush content provider in com.android.provider.telephony, as found in some custom ROMs for Android phones, allows SQL injection. One consequence is that an application without the READ_SMS permission can read SMS messages. This affects Infinix X571 phones, as well as various Lenovo p...