Dark Reading is part of the Informa Tech Division of Informa PLC

This site is operated by a business or businesses owned by Informa PLC and all copyright resides with them.Informa PLC's registered office is 5 Howick Place, London SW1P 1WG. Registered in England and Wales. Number 8860726.

Comments
Cartoon Contest: Gong Show
Newest First  |  Oldest First  |  Threaded View
<<   <   Page 3 / 3
matthewkmiller
33%
67%
matthewkmiller,
User Rank: Strategist
12/3/2020 | 11:45:17 AM
Broken Speaker
The speaker in my workstation stopped working. It's my new mail alert.
acampbell448
0%
100%
acampbell448,
User Rank: Strategist
12/1/2020 | 9:25:51 AM
Bing Watching?
I think the boss is bing watching '70s TV shows again!
dabeertender
33%
67%
dabeertender,
User Rank: Apprentice
11/30/2020 | 3:42:56 PM
Gong
We are really excited about our new two tone authentication system!
cstudent
0%
100%
cstudent,
User Rank: Apprentice
11/28/2020 | 3:04:45 PM
Caption Contest: Gong Show
I dozed off at my desk one time.
rwza01@gmail.com
0%
100%
[email protected],
User Rank: Apprentice
11/27/2020 | 12:47:43 AM
tamtam.chat
He's proving that the tamtam app is really available on any platform
Tempest2004
0%
100%
Tempest2004,
User Rank: Strategist
11/24/2020 | 10:14:22 PM
Gong
He hits the gong anytime he sees someone click on an email link.
pfharv@gmail.com
0%
100%
[email protected],
User Rank: Apprentice
11/24/2020 | 2:38:21 PM
Cartoon Rythym
« I said Clickety-click-click-Gong » not fyjqteeusurerkryo
northdmr
50%
50%
northdmr,
User Rank: Strategist
11/24/2020 | 10:50:10 AM
New Alert - Patch Tuesday
That's the CISO's new alert sound for Patch Tuesday upodates.  Let's get busy!
drmrs
33%
67%
drmrs,
User Rank: Strategist
11/19/2020 | 4:31:37 PM
Cartoon Contest: Gong Show
A GONG is as good as a cyber attack.
<<   <   Page 3 / 3


Commentary
How SolarWinds Busted Up Our Assumptions About Code Signing
Dr. Jethro Beekman, Technical Director,  3/3/2021
News
'ObliqueRAT' Now Hides Behind Images on Compromised Websites
Jai Vijayan, Contributing Writer,  3/2/2021
News
Attackers Turn Struggling Software Projects Into Trojan Horses
Robert Lemos, Contributing Writer,  2/26/2021
Register for Dark Reading Newsletters
White Papers
Video
Cartoon Contest
Write a Caption, Win an Amazon Gift Card! Click Here
Latest Comment: Your new device is too complex. Me stick with iWheel.
Current Issue
2021 Top Enterprise IT Trends
We've identified the key trends that are poised to impact the IT landscape in 2021. Find out why they're important and how they will affect you today!
Flash Poll
How Enterprises are Developing Secure Applications
How Enterprises are Developing Secure Applications
Recent breaches of third-party apps are driving many organizations to think harder about the security of their off-the-shelf software as they continue to move left in secure software development practices.
Twitter Feed
Dark Reading - Bug Report
Bug Report
Enterprise Vulnerabilities
From DHS/US-CERT's National Vulnerability Database
CVE-2021-27940
PUBLISHED: 2021-03-03
resources/public/js/orchestrator.js in openark orchestrator before 3.2.4 allows XSS via the orchestrator-msg parameter.
CVE-2021-21312
PUBLISHED: 2021-03-03
GLPI is open source software which stands for Gestionnaire Libre de Parc Informatique and it is a Free Asset and IT Management Software package. In GLPI before verison 9.5.4, there is a vulnerability within the document upload function (Home &gt; Management &gt; Documents &gt; Add, or /front/documen...
CVE-2021-21313
PUBLISHED: 2021-03-03
GLPI is open source software which stands for Gestionnaire Libre de Parc Informatique and it is a Free Asset and IT Management Software package. In GLPI before verison 9.5.4, there is a vulnerability in the /ajax/common.tabs.php endpoint, indeed, at least two parameters _target and id are not proper...
CVE-2021-21314
PUBLISHED: 2021-03-03
GLPI is open source software which stands for Gestionnaire Libre de Parc Informatique and it is a Free Asset and IT Management Software package. In GLPI before verison 9.5.4, there is an XSS vulnerability involving a logged in user while updating a ticket.
CVE-2021-27931
PUBLISHED: 2021-03-03
LumisXP (aka Lumis Experience Platform) before 10.0.0 allows unauthenticated blind XXE via an API request to PageControllerXml.jsp. One can send a request crafted with an XXE payload and achieve outcomes such as reading local server files or denial of service.