Powered By InformationWeek Business Technology Network
 

About Us

A QUICK UPDATE FOR OUR VISITORS
Dark Reading is a comprehensive news and information portal that focuses on IT security, helping information security professionals manage the balance between data protection and user access. We are a part of TechWeb, a unit of United Business Media (UBM), which serves the information and business needs of 10,000,000 business technology decision-makers like you that who use our websites, attend our events, utilize our services and read our magazines. To learn more about TechWeb and how we can help drive your business, go to techweb.com/aboutus. Dark Reading is a member of the TechWeb Business Technology Network, a family of IT-oriented Websites and print publications led by InformationWeek, one of the industry's most popular IT publications. To learn more about InformationWeek and the Business Technology Network, go to http://www.informationweek.com.

After more nearly three years of reporting and analyzing security vulnerabilities, breaches, and black hat-types, we can guarantee one truth: your data isn't safe. If it isn't threatened by a corporate insider or a blundering user, it's likely been targeted by a botnet, phisher, or organized crime. You need to know what the latest threats are, how they operate, and what they can do to your organization. We're here to help.

Dark Reading was launched in May 2006, incorporating CMP Media's Secure Enterprise and Security Pipeline publications. Our mission is to be the top security news source for enterprise IT and network security professionals, providing the most up-to-date information about products, management strategies, architectures, and security policy. Our goal is to help security professionals manage the balance between two critical, yet often conflicting goals: providing broad access to data to improve business operations; and protecting business data from theft or compromise.

Dark Reading is a security dashboard for IT professionals who don't have the time or the luxury of combing wirefeeds, multiple bug feeds, or vendor Websites to find out what's new or how well it works. Here, readers will get the latest on the security industry from our crack reporting, and also links to the best security content from all across the Web.

In other words, come for the news, but hang around for the analysis, opinion, and product reviews. (Or come back later, when some sales exec isn't bursting an artery in your doorway because a malware attack has slowed orders on the e-commerce server.)

Unlike other security Websites, Dark Reading gives readers breadth and depth. Our specialty is useful information -- as opposed to that other kind: industry arcana that's more nice than necessary to know. On a day-to-day level, that means best practices for security networking, or the benefits and challenges of new technology as described by hands-on researchers who've analyzed the threats and real customers who've slogged through the latest technology deployments. Dark Reading shows readers what the real dangers are -- and what to do about them.

Of course we talk to vendors of hardware, software, and services. We also talk to security researchers, both white hats and black hats. We hope there's something here that everyone can use. But our stories are primarily written for the buyers, managers, and consumers of security technology: Many of our readers are IT professionals with security specialties and CISSP or CISA certifications; CIOs; CTOs; CSOs, CISOs, and CCOs (that's "chief compliance officers"), among others.

As the types of malware continue to increase, data theft and loss become more prevalent, and the specter of internal threats grows larger, IT security ranks among the most serious challenges faced by businesses in any sector. When it comes time to ask the hard questions and make whatever tradeoffs are necessary, Dark Reading helps ensure you'll make smart, informed choices -- about products, management strategies, architecture, and security policy.

That's the best medicine we know for any insecurity.

Corporate Headquarters:
Dark Reading, a TechWeb publication
600 Community Drive
Manhasset, NY 11030
516-562-5000 (phone)





Bugs
ENTERPRISE VULNERABILITIES
Vulnerability:com datsogallery
Published:2008-11-24
Severity:High
Description:SQL injection vulnerability in sub_votepic.php in the Datsogallery (com_datsogallery) module 1.6 for Joomla! allows remote attackers to execute arbitrary SQL commands via the User-Agent HTTP header.
Vulnerability:admidio
Published:2008-11-24
Severity:Medium
Description:Directory traversal vulnerability in modules/download/get_file.php in Admidio 1.4.8 allows remote attackers to read arbitrary files via a .. (dot dot) in the file parameter.
Vulnerability:phpblock
Published:2008-11-24
Severity:High
Description:Multiple PHP remote file inclusion vulnerabilities in PhpBlock A8.5 allow remote attackers to execute arbitrary PHP code via a URL in the PATH_TO_CODE parameter to (1) script/init/createallimagecache.php, (2) allincludefortick.php and (3) test.php in script/tick/, and (4) modules/dungeon/tick/allincludefortick.php, different vectors than CVE-2008-1776.
Vulnerability:sphider
Published:2008-11-24
Severity:Low
Description:Cross-site scripting (XSS) vulnerability in search.php in Sphider 1.3.4, when the search suggestion feature is enabled, allows remote attackers to inject arbitrary web script or HTML via the query parameter, a different vector than CVE-2006-2506.
Vulnerability:aj auction
Published:2008-11-24
Severity:High
Description:SQL injection vulnerability in classifide_ad.php in AJ Auction 6.2.1 and earlier allows remote attackers to execute arbitrary SQL commands via the item_id parameter.


Briefing Centers
POWERFUL INFORMATION
AT YOUR FINGERTIPS
(SPONSORED LINKS)