Dark Reading is part of the Informa Tech Division of Informa PLC

This site is operated by a business or businesses owned by Informa PLC and all copyright resides with them.Informa PLC's registered office is 5 Howick Place, London SW1P 1WG. Registered in England and Wales. Number 8860726.

Author

 Katie Burnell

Profile of Katie Burnell

Global Insider Threat Specialist, Dtex Systems
News & Commentary Posts: 1

When Katie Burnell went to work for the Bank of England as a data processor, she didn't intend to switch career paths into cybersecurity. She was on the digital media team when she learned the bank was creating an IT security department. As she moved up through the ranks, Burnell helped build the bank's first security operations center and insider threat capability, eventually landing a role as cyber investigator. Now she works as a Global Insider Threat Specialist at Dtex, where she analyzes user activity, conducts threat assessments, and communicates security risks to a pool of clients that includes large global financial institutions, power suppliers, and government agencies.

As an expert threat specialist, Burnell splits her time between US-based large financial institutions and Dtex's EMEA customer base. She also fulfills a role in the EMEA pre-sales strategy, meeting with prospective customers, providing strategic consultations, and representing Dtex at partner events. On top of that, Burnell helps develop the "Dtex Insider Threat Intelligence Report" and works with other teams to advance Dtex technology and expertise in detecting insider threats. Her time with the Bank of England helped establish her skills in detecting insider threats, she says, and her interest and qualifications in open source intelligence (OSINT) helped grow them. Burnell is a qualified OSINT practitioner, certified "human hacker," Maltego CTF champion, and advocate for women in cybersecurity.

COVID-19: Latest Security News & Commentary
Dark Reading Staff 6/4/2020
Abandoned Apps May Pose Security Risk to Mobile Devices
Robert Lemos, Contributing Writer,  5/29/2020
How AI and Automation Can Help Bridge the Cybersecurity Talent Gap
Peter Barker, Chief Product Officer at ForgeRock,  6/1/2020
Register for Dark Reading Newsletters
White Papers
Video
Cartoon Contest
Write a Caption, Win a Starbucks Card! Click Here
Latest Comment: What? IT said I needed virus protection!
Current Issue
How Cybersecurity Incident Response Programs Work (and Why Some Don't)
This Tech Digest takes a look at the vital role cybersecurity incident response (IR) plays in managing cyber-risk within organizations. Download the Tech Digest today to find out how well-planned IR programs can detect intrusions, contain breaches, and help an organization restore normal operations.
Flash Poll
Twitter Feed
Dark Reading - Bug Report
Bug Report
Enterprise Vulnerabilities
From DHS/US-CERT's National Vulnerability Database
CVE-2020-11679
PUBLISHED: 2020-06-04
Castel NextGen DVR v1.0.0 is vulnerable to privilege escalation through the Adminstrator/Users/Edit/:UserId functionality. Adminstrator/Users/Edit/:UserId fails to check that the request was submitted by an Administrator. This allows a normal user to escalate their privileges by adding additional ro...
CVE-2020-11680
PUBLISHED: 2020-06-04
Castel NextGen DVR v1.0.0 is vulnerable to authorization bypass on all administrator functionality. The application fails to check that a request was submitted by an administrator. Consequently, a normal user can perform actions including, but not limited to, creating/modifying the file store, creat...
CVE-2020-11681
PUBLISHED: 2020-06-04
Castel NextGen DVR v1.0.0 stores and displays credentials for the associated SMTP server in cleartext. Low privileged users can exploit this to create an administrator user and obtain the SMTP credentials.
CVE-2020-7661
PUBLISHED: 2020-06-04
all versions of url-regex are vulnerable to Regular Expression Denial of Service. An attacker providing a very long string in String.test can cause a Denial of Service.
CVE-2020-10702
PUBLISHED: 2020-06-04
A flaw was found in QEMU in the implementation of the Pointer Authentication (PAuth) support for ARM introduced in version 4.0 and fixed in version 5.0.0. A general failure of the signature generation process caused every PAuth-enforced pointer to be signed with the same signature. A local attacker ...