Hundreds of Millions of Dell Computers Potentially Vulnerable | Researchers Explore Active Directory Attack Vectors

Click here to subscribe to Informationweek.com

Categories: Services | Professionals Business goods Financially Kantoor Marketing Retail Retail Industry Machines Age: 14 until 18 year 19 until 30 year 31 until 64 years

3 years ago

Html
Text

Follow Dark Reading:

May 06, 2021

LATEST SECURITY NEWS & COMMENTARY

Attackers Seek New Strategies to Improve Macros' Effectiveness The ubiquity of Microsoft Office document formats means attackers will continue to use them to spread malware and infect systems. Hundreds of Millions of Dell Computers Potentially Vulnerable to Attack Hardware maker has issued an update to fix multiple critical privilege escalation vulnerabilities that have gone undetected since 2009. Researchers Explore Active Directory Attack Vectors Incident responders who investigate attacks targeting Active Directory discuss methods used to gain entry, elevate privileges, and control target systems. Ransomware Task Force Publishes Framework to Fight Global Threat An 81-page report details how ransomware has evolved, along with recommendations on how to deter attacks and disrupt its business model. Dark Reading Celebrates 15th Anniversary Cybersecurity news site begins 16th year with plans to improve site, deliver more content on cyber threats and best practices. Wanted: The (Elusive) Cybersecurity 'All-Star' Separate workforce studies by (ISC) 2 and ISACA point to the need for security departments to work with existing staff to identify needs and bring entry-level people into the field. Researchers Connect Complex Specs to Software Vulnerabilities Following their release of 70 different vulnerabilities in different implementations of TCP/IP stacks over the past year, two companies find a common link. Your Digital Identity's Evil Shadow In the wrong hands, these shady shadows are stealthy means to bypass security systems by hiding behind a proxy with legitimate IP addresses and user agents. The Ticking Time Bomb in Every Company's Code Developers must weigh the benefits and risks of using third-party code in Web apps. 'BadAlloc' Flaws Could Threaten IoT and OT Devices: Microsoft More than 25 critical memory allocation bugs could enable attackers to bypass security controls in industrial, medical, and enterprise devices. MORE NEWS & COMMENTARY


HOT TOPICS
Newer Generic Top-Level Domains a Security 'Nuisance' Ten years of passive DNS data shows classic TLDs such as .com and .net dominate newer TLDs in popularity and use. Stopping the Next SolarWinds Requires Doing Something Different Will the SolarWinds breach finally prompt the right legislative and regulatory actions on a broader, more effective scale? Planning Our Passwordless Future All the talk that passwords could one day go away seemed too good to be true, yet the scales are finally started to tip to a passwordless reality. (Part one of a two-part series.) MORE

EDITORS' CHOICE
7 Modern-Day Cybersecurity Realities Security pros may be working with a false sense of security. We explore seven places where old methods and techniques have to change to keep their organizations safe. It's Time to Ditch Celebrity Cybersecurity High-profile attacks and solutions are shiny objects that can distract from the defenses that afford the greatest protection. LATEST FROM THE EDGE
Ghost Town Security: What Threats Lurk in Abandoned Offices? Millions of office buildings and campuses were rapidly abandoned during the pandemic. Now it's a year later. What happened in those office parks and downtown ghost towns? What security dangers lurk there now, waiting to ambush returning businesses?

Tech Resources

What Elite Threat Hunters See That Others Miss: Case Study The Five Major Security Pitfalls of WFH and How to Solve Them Tech Insights: Detecting and Preventing Insider Data Leaks Supercharge Incident Response with DDI Visibility Unit 42 Ransomware Threat Report Reduce Complexity and Risks with an Integrated Platform Approach to Cloud Security Gartner: Hype Cycle for Security Operations

ACCESS TECH LIBRARY NOW

Web Security: Protecting Your Data from Internet Threats

One of the most accessible methods of cracking your corporate data is through a simple Internet connection. In this webinar, experts offer a look at some of the most common ways that cyber attackers use to crack enterprise systems via ...

Keys to Better Cyber Risk Assessment

At this Dark Reading webinar, learn about the costs associated with today's threats and data breaches, how to measure current threats, and how to quantify the risks to your organization, so that you can implement the tools and processes to ...

MORE WEBINARS

FEATURED REPORTS

Improving Security by Moving Beyond VPN Accelerate Threat Resolutions with DNS

MORE REPORTS

CURRENT ISSUE

2021 Top Enterprise IT Trends
DOWNLOAD THIS ISSUE	SUBSCRIBE NOW
BACK ISSUES \| MUST READS \| TECH DIGEST

PRODUCTS & RELEASES

SafeGuard Cyber Introduces Advanced Governance for Zoom Video Communications Cyber Readiness Institute Calls on Biden Administration To Make Small Business Cybersecurity a National Priority Secretary of Homeland Security to Participate in U.S. Chamber of Commerce NOW + NEXT LiveAction Acquires CounterFlow AI to Expand Network Security Offerings Sectigo Acquires SiteLock, Solidifying Its Market-Leading Position in Web Security New Report Finds Online Phishing and Fraud Activity Up 185% in 2020 Mandiant Selects PlexTrac for its Proactive Assessment Reporting Platform MORE PRODUCTS & RELEASES

Dark Reading Weekly
-- Published By Dark Reading
Informa Tech
303 Second St., Suite 900 South Tower, San Francisco, CA 94107

To update your profile, change your e-mail address, or unsubscribe, click here.

To opt-out of any future Dark Reading Weekly Newsletter emails, please respond here.

Thoughts about this newsletter? Give us feedback.

Keep This Newsletter Out Of Your SPAM Folder
Don't let future editions go missing. Take a moment to add the newsletter's address to your anti-spam white list:

If you're not sure how to do that, ask your administrator or ISP. Or check your anti-spam utility's documentation.

We take your privacy very seriously. Please review our Privacy Statement.

Share on

Other newsletters from Informationweek.com

Cisco Report: Enterprises Ill-prepared to Realize AI’s Potential Informationweek.com
Yesterday at 16:31
Ransomware Attack on Blue Yonder Hits Starbucks, Supermarkets | Fancy Bear's Nearest Neighbor Uses Nearby Wi-Fi Network Informationweek.com
Last Wednesday at 18:44
How to Create an Accurate IT Project Timeline Informationweek.com
Last Wednesday at 16:01

More newsletters from Informationweek.com

Related newsletters

View other categories

Services | Professionals Business goods Financially Kantoor Marketing Retail Retail Industry Machines

Hundreds of Millions of Dell Computers Potentially Vulnerable | Researchers Explore Active Directory Attack Vectors

2021 Top Enterprise IT Trends

Share on

Other newsletters from Informationweek.com

Related newsletters

View other categories