Patch Critical Bug Now: QNAP NAS Devices Ripe for the SlaughterAnalysts find that 98% of QNAP NAS are vulnerable to CVE-2022-27596, which allows unauthenticated, remote SQL...
Category: DARKReading
Why CISOs Should Care About Brand Impersonation Scam Sites
Why CISOs Should Care About Brand Impersonation Scam SitesEnterprises often don't know whose responsibility it is to monitor for spoofed brand sites and scams that steal...
Firmware Flaws Could Spell ‘Lights Out’ for Servers
Firmware Flaws Could Spell 'Lights Out' for ServersFive vulnerabilities in the baseboard management controller (BMC) software used by 15 major vendors could allow remote code execution...
How Can Disrupting DNS Communications Thwart a Malware Attack?
How Can Disrupting DNS Communications Thwart a Malware Attack?Malware eventually has to exfiltrate the data it accessed. By watching DNS traffic for suspicious activity, organizations can...
Checkmarx Launches Threat Intelligence for Open Source Packages
Checkmarx Launches Threat Intelligence for Open Source PackagesThe new API incorporates threat intelligence research and employs machine learning to identify threats in the supply chain.Read MoreDark...
Google Fi Users Caught Up in T-Mobile Breach
Google Fi Users Caught Up in T-Mobile BreachGoogle Fi mobile customers have been alerted that their SIM card serial numbers, phone numbers, and other data were...
ManageEngine Study Finds United States Enterprises Hit by Short-Staffed Security Operations Centers
ManageEngine Study Finds United States Enterprises Hit by Short-Staffed Security Operations CentersStudy also reveals enterprises rely on multiple tools to ensure cloud security.Read MoreDark ReadingStudy also...
KnowBe4 to Offer $10,000 to Black Americans in Cybersecurity Scholarship
KnowBe4 to Offer $10,000 to Black Americans in Cybersecurity ScholarshipKnowBe4 partners with the Center for Cyber Safety and Education to support Black Americans in recognition of...
Application Security Must Be Nonnegotiable
Application Security Must Be NonnegotiableCompanies need to keep security priorities top of mind during economic downturns so all-important revenue generation doesn't come with a heaping side...
Fortra’s Terranova Security 2022 Gone Phishing Tournament Results Reveal Large Organizations at Highest Risk of Compromising Data
Fortra's Terranova Security 2022 Gone Phishing Tournament Results Reveal Large Organizations at Highest Risk of Compromising DataFindings underscore security awareness training that leverages practical, hands-on exercises...
Contrast Security Launches Alliance Program to Change the Way Customers Scale Their Security Solutions
Contrast Security Launches Alliance Program to Change the Way Customers Scale Their Security SolutionsThe Security Innovation Alliance (SIA) empowers customers to create holistic security programs by...
Command-Injection Bug in Cisco Industrial Gear Opens Devices to Complete Takeover
Command-Injection Bug in Cisco Industrial Gear Opens Devices to Complete TakeoverTwo security holes — one particularly gnarly — could allow hackers the freedom to do as...