Dark Reading is part of the Informa Tech Division of Informa PLC

This site is operated by a business or businesses owned by Informa PLC and all copyright resides with them.Informa PLC's registered office is 5 Howick Place, London SW1P 1WG. Registered in England and Wales. Number 8860726.

Flash Poll

Latest Content
Ransomware Response
Flash Poll  |  12/14/2020  | 
Political Climate Change
Flash Poll  |  11/2/2017  | 
Security Time
Flash Poll  |  4/14/2015  | 
Prepared for a Cyberattack?
Flash Poll  |  3/11/2015  | 
Eyes On The Analytics Prize
Flash Poll  |  3/1/2015  | 
Analyze This?
Flash Poll  |  2/1/2015  | 
Monitor Management
Flash Poll  |  1/2/2015  | 
Action Speaks Louder
Flash Poll  |  1/1/2015  | 
Reliable Sources
Flash Poll  |  12/1/2014  | 
Defending Against Malware
Flash Poll  |  11/10/2014  | 
Intelligence Hired Guns?
Flash Poll  |  11/1/2014  | 
Breach Security 101
Flash Poll  |  10/21/2014  | 
Death of the Perimeter
Flash Poll  |  10/21/2014  | 
See Something, Say Something
Flash Poll  |  10/1/2014  | 
Bashed & Shellshocked
Flash Poll  |  9/30/2014  | 
Hacking Humans
Flash Poll  |  9/5/2014  | 
Security of 'Things'
Flash Poll  |  8/21/2014  | 
Security Org Chart
Flash Poll  |  7/18/2014  | 
Risk Management Report Card
Flash Poll  |  6/16/2014  | 
Greatest Threat
Flash Poll  |  6/4/2014  | 
Lessons Learned
Flash Poll  |  6/1/2014  | 
Cyber Security Skills
Flash Poll  |  5/29/2014  | 
Cyberbreach or Cyberrisk Insurance
Flash Poll  |  5/20/2014  | 
State of IT Security
Flash Poll  |  5/5/2014  | 
Broken Heartbeat
Flash Poll  |  4/10/2014  | 
Windows XP
Flash Poll  |  4/2/2014  | 
Safety Equipment
Flash Poll  |  11/15/2013  | 


Attackers Leave Stolen Credentials Searchable on Google
Kelly Sheridan, Staff Editor, Dark Reading,  1/21/2021
How to Better Secure Your Microsoft 365 Environment
Kelly Sheridan, Staff Editor, Dark Reading,  1/25/2021
Register for Dark Reading Newsletters
White Papers
Video
Cartoon Contest
Write a Caption, Win an Amazon Gift Card! Click Here
Latest Comment: We need more votes, check the obituaries.
Current Issue
2020: The Year in Security
Download this Tech Digest for a look at the biggest security stories that - so far - have shaped a very strange and stressful year.
Flash Poll
Assessing Cybersecurity Risk in Today's Enterprises
Assessing Cybersecurity Risk in Today's Enterprises
COVID-19 has created a new IT paradigm in the enterprise -- and a new level of cybersecurity risk. This report offers a look at how enterprises are assessing and managing cyber-risk under the new normal.
Twitter Feed
Dark Reading - Bug Report
Bug Report
Enterprise Vulnerabilities
From DHS/US-CERT's National Vulnerability Database
CVE-2021-3317
PUBLISHED: 2021-01-26
KLog Server through 2.4.1 allows authenticated command injection. async.php calls shell_exec() on the original value of the source parameter.
CVE-2013-2512
PUBLISHED: 2021-01-26
The ftpd gem 0.2.1 for Ruby allows remote attackers to execute arbitrary OS commands via shell metacharacters in a LIST or NLST command argument within FTP protocol traffic.
CVE-2021-3165
PUBLISHED: 2021-01-26
SmartAgent 3.1.0 allows a ViewOnly attacker to create a SuperUser account via the /#/CampaignManager/users URI.
CVE-2021-1070
PUBLISHED: 2021-01-26
NVIDIA Jetson AGX Xavier Series, Jetson Xavier NX, TX1, TX2, Nano and Nano 2GB, L4T versions prior to 32.5, contains a vulnerability in the apply_binaries.sh script used to install NVIDIA components into the root file system image, in which improper access control is applied, which may lead to an un...
CVE-2021-1071
PUBLISHED: 2021-01-26
NVIDIA Tegra kernel in Jetson AGX Xavier Series, Jetson Xavier NX, TX1, TX2, Nano and Nano 2GB, all L4T versions prior to r32.5, contains a vulnerability in the INA3221 driver in which improper access control may lead to unauthorized users gaining access to system power usage data, which may lead to...