A vulnerability in the HNAP login request protocol that affects a family of devices gives unauthenticated users root access for command execution.
Episode 1 of Dark Reading Confidential brings Frederick “Flee” Lee, CISO of Reddit, Beth Burgin Waller, a practicing cyber attorney who represents many CISOs, and Ben Lee, Chief Legal Officer of Reddit, to the table.
Latest Commentary
Founder & Chief Security Officer, Conversant Group
Chief Security Officer, Clear Skye
Sr. Director of Government and Education Affairs, SHI
SANS Institute experts weigh in on the top threat vectors faced by enterprises and the public at large.
Ten years have passed since Heartbleed was first identified, but the security industry is still grappling with the question of branded vulnerabilities and naming vulnerabilities appropriately.
Enterprises are increasingly recognizing that a CISO's skills and experience building risk-based cyber programs translate well to other C-suite positions.
Cybersecurity Features In-Depth: On security strategy, latest trends, and people to know. Brought to you by Mandiant.
Security Technology: Featuring news, news analysis, and commentary on the latest technology trends.
Key management is more complex than ever. Your choices are to rely on your cloud provider or manage keys locally, encrypt only the most critical data, or encrypt everything.
In a field thick with cybersecurity startups showing off how they use AI and LLMs, Reality Defender stood out for its tool for detecting and labeling deepfakes and other artificial content.
Instead of building a list of users and identifying which systems each user can access, Token Security starts with a list of machines and determines who can access each system.
The nation amends its Cybersecurity Act, giving its primary cybersecurity agency more power to regulate critical infrastructure and third parties, and requiring cyber incidents be reported.
Researchers recently spotted the Spanish-speaking threat actor — with nearly 400 previous victims under its belt — in a new campaign in Latin America and Central Africa.
Iran follows in Russia's disinformation footsteps but with a different, more economical, and potentially higher-impact model.
Breaking cybersecurity news, news analysis, commentary, and other content from around the world.
Leveling Up Cyber-Threat Intelligence Maturity for More Value and Better Insights
Shining a light in the dark: observability and security, a SANS profile
Elastic named a Leader in The Forrester Wave™: Security Analytics Platforms, Q4 2022
EMA: AI at your fingertips: How Elastic AI Assistant simplifies cybersecurity
ESG E-Book: Taking a Holistic Approach to Securing Cloud-Native Application Development
Black Hat USA - August 3-8 - Learn More
August 3, 2024Cybersecurity's Hottest New Technologies: What You Need To Know
March 21, 2024Where and Why Threat Intelligence Makes Sense for Your Enterprise Security Strategy
May 15, 2024Safeguarding Political Campaigns: Defending Against Mass Phishing Attacks
May 16, 2024Why Effective Asset Management is Critical to Enterprise Cybersecurity
May 21, 2024Finding Your Way on the Path to Zero Trust
May 22, 2024Extending Access Management: Securing Access for all Identities, Devices, and Applications
June 4, 2024
.jpg?width=100&auto=webp&quality=80&disable=upscale "Picture of Nate Nelson, Contributing Writer")
