Network & Infrastructure Security

How was a Cisco firewall vulnerability exploited by threat actors?

Threat actors exploited a critical Cisco firewall vulnerability that received a CVSS score of 10. Discover how this flaw works and how it was exploited with Judith Myerson. Continue Reading

By

• Judith Myerson

Dragos' Robert Lee explains why ICS security isn't all doom and gloom

Dragos' Robert Lee talks with SearchSecurity at RSA Conference 2018 about why there are reasons to be optimistic about the state of ICS security, despite growing threats. Continue Reading

By

• Rob Wright, Senior News Director, Dark Reading

Risk & Repeat: Why Ray Ozzie's Clear proposal isn't so clear

In this week's Risk & Repeat podcast, SearchSecurity editors discuss Ray Ozzie's solution for going dark, known as Clear, and what infosec experts are saying about it. Continue Reading

By

• Rob Wright, Senior News Director, Dark Reading

Efail flaws highlight risky implementations of PGP and S/MIME

The messy disclosure of the Efail flaws raised questions about the security of email encryption, while experts said S/MIME may be more at risk than some PGP implementations. Continue Reading

By

• Michael Heller, TechTarget

Three IoT encryption alternatives for enterprises to consider

The use of cryptography alternatives for IoT devices grants users certain benefits and potential security challenges. Learn more about each alternative with expert Judith Myerson. Continue Reading

By

• Judith Myerson

Protecting the DNS protocol: How DNSSEC can help

Securing the DNS protocol is no joke. Learn what the DNS Security Extensions are and the efforts the United States government is taking to push DNSSEC adoption. Continue Reading

By

• Karen Kent, Trusted Cyber Annex

Ways to solve DNS security issues in your organization

Get up to speed fast on means and methods for reducing or eliminating security-related issues in DNS, an integral service upon which the internet depends. Continue Reading

By

• Karen Kent, Trusted Cyber Annex

How air gap attacks challenge the notion of secure networks

Today's cyberattacks are taking new shapes and sizes in the ever-changing tech environment. This guide explores air gap attacks, the history behind them and the latest threats facing air-gapped networks. Continue Reading

SentinelOne CEO: Endpoint security market full of 'noise and confusion'

In part two of the interview with SentinelOne CEO Tomer Weingarten, he discusses how niche products and venture capital investments have affected the endpoint security space. Continue Reading

By

• Rob Wright, Senior News Director, Dark Reading

IXPs asked to mind their 'MANRS' to improve routing security

The Internet Society expands its Mutually Agreed Norms for Routing Security, or MANRS, to IXPs as a means to protect the internet from route hijacking, leaks and IP address spoofing. Continue Reading

By

• Peter Loshin, Former Senior Technology Editor

Passive DNS techniques can reduce DNS abuse

Presenting at RSAC 2018, Farsight Security's Merike Kaeo explains how defenders can adopt passive techniques to reduce DNS abuse and stop attacks before they happen. Continue Reading

By

• Peter Loshin, Former Senior Technology Editor

Zero-trust model promises increased security, decreased risk

The zero-trust model takes focused and sustained effort, but promises to improve most companies' risk posture. Learn what it takes to get the most out of zero trust. Continue Reading

By

• Johna Till Johnson, Nemertes Research

Marcus Ranum decodes hardware vulnerabilities with Joe Grand

Computer hardware designs with dangerous security flaws? That's no surprise to renowned hardware hacker Grand. Continue Reading

By

• Marcus J. Ranum

What VPN alternatives should enterprises consider using?

VPN vulnerabilities in products from popular vendors were recently found to enable serious threats. Discover how detrimental these threats are and best alternatives to the use of VPNs. Continue Reading

By

• Judith Myerson

TLS 1.3 update is finalized with encryption upgrade

The IETF approves the TLS 1.3 encryption protocol upgrade after four years and 28 versions; improvements include better security and performance, as well as middlebox support. Continue Reading

By

• Peter Loshin, Former Senior Technology Editor

Emotet Trojan: How to defend against fileless attacks

An increase in fileless malware, including PowerShell malware, was reported in McAfee Labs' December 2017 Threat Report. Discover how enterprises can defend again fileless attacks. Continue Reading

By

• Nick Lewis

Leaked report on AMD chip flaws raises ethical disclosure questions

Researchers announced AMD chip flaws without the coordinated disclosure procedure, and a leak of the research to a short seller has raised further suspicions about the process. Continue Reading

By

• Michael Heller, TechTarget

Researchers claim AMD flaws threaten Ryzen, EPYC chips

Ryzen and EPYC AMD flaws were partially detailed with just 24 hours' disclosure notice, despite potentially significant exploits, including secure processor takeover or security bypass. Continue Reading

By

• Michael Heller, TechTarget

How the Mirai botnet changed IoT security and DDoS defense

It seemed that no IoT device was safe from the Mirai botnet when it took down major enterprises and internet infrastructure providers with massive DDoS attacks. Continue Reading

Risk & Repeat: Trustico certificate drama a cause for concern

In this week's Risk & Repeat podcast, SearchSecurity editors discuss how a controversial move by reseller Trustico led to 23,000 Symantec SSL certificates being revoked. Continue Reading

By

• Rob Wright, Senior News Director, Dark Reading

The Keeper browser extension flaw: How can users stay secure?

The Keeper browser extension had a vulnerability that highlighted security issues with password managers. Expert Michael Cobb looks at how to avoid security flaws in these tools. Continue Reading

By

• Michael Cobb

VMs per host: What are the risks of multiple connections?

While there are no set rules, there are some security recommendations when it comes to virtual machines running on one host. Learn the best practices with expert Matt Pascucci. Continue Reading

By

• Matthew Pascucci

Memcrashed DDoS amplification exploits memcached UDP port

Memcrashed, a devastating new DDoS amplification attack that exploits UDP port 11211, is only possible when memcached servers are exposed to the public internet. Continue Reading

By

• Peter Loshin, Former Senior Technology Editor

Protecting safety instrumented systems from malware attacks

Trisis malware targets safety instrumented systems and puts industrial control systems at risk. Expert Ernie Hayden reviews what to know about SIS and its security measures. Continue Reading

By

• Ernie Hayden, 443 Consulting LLC

Antivirus tools: Are two programs better than one?

Antivirus software is crucial to your device's security. However, less is often more, especially when considering a secondary free antivirus program. Nick Lewis explains why. Continue Reading

By

• Nick Lewis

Critical Broadcom flaws discovered in Lenovo ThinkPads

Two critical flaws in Broadcom Wi-Fi chips disclosed last year were thought to affect only Apple and Android devices, but Lenovo now says ThinkPad models are vulnerable, too. Continue Reading

By

• Rob Wright, Senior News Director, Dark Reading

Fight a targeted cyberattack with network segmentation, monitoring

It takes a variety of tactics, including network segmenting and monitoring, to safeguard the network. Learn the latest defenses to keep your network safe. Continue Reading

By

• Michael Cobb

New Comodo CA leadership talks competition, IoT devices

Comodo CA's new chairman Bill Conner and CEO Bill Holtz talk with SearchSecurity about competition in the certificate market and how the internet of things will fuel growth. Continue Reading

By

• Rob Wright, Senior News Director, Dark Reading

How HTTP security headers can defend enterprise systems

HTTP security headers that have the right configurations can be used as defense methods against cyberattacks. Expert Judith Myerson outlines how to use headers this way. Continue Reading

By

• Judith Myerson

Skygofree Android spyware is a powerful surveillance tool

A new Android spyware tool called Skygofree was described as one of the most powerful surveillance tools and can even capture encrypted messages from WhatsApp. Continue Reading

By

• Michael Heller, TechTarget

TLS 1.3: What it means for enterprise cloud use

The latest draft version of TLS 1.3 is out, and it will likely affect enterprises that use cloud services. Expert Ed Moyle explains the impact on users and their monitoring controls. Continue Reading

By

• Ed Moyle, SecurityCurve

WPA3 Wi-Fi protocol aims to improve security in 2018

The new WPA3 Wi-Fi protocol aims to improve security for IoT devices and strengthen password security with protections against brute force attacks. Continue Reading

By

• Michael Heller, TechTarget

Security compliance standards as a guide in endpoint plans

Consider security compliance regulations for your industry as a starting point and a guide for planning your specific approach to enterprise endpoint protection. Continue Reading

By

• Brien Posey

The endpoint security controls you should consider now

With the perimeter wall gone, securing enterprise endpoints is even more essential. Learn how automation and other developments can up endpoint protection now. Continue Reading

By

• Brien Posey

How should enterprise firewall settings be reviewed?

Getting firewall settings right is one of the most basic ways to protect enterprise data from accidental exposures. Expert Judith Myerson discusses how to review firewall policies. Continue Reading

By

• Judith Myerson

How is IP theft possible despite cryptographic protections?

Expert Judith Myerson explains how IP theft can happen despite the cryptographic protections in IEEE standard P1735, as well as what can be done to protect intellectual property. Continue Reading

By

• Judith Myerson

NIST botnet security report recommendations open for comments

Federal agencies opened public comments on a draft botnet security report born from the 2017 White House cybersecurity executive order, and experts are generally favorable. Continue Reading

By

• Michael Heller, TechTarget

Android bootloader: How does it work and what is the risk?

Several vulnerabilities were recently discovered in Android bootloaders via the BootStomp tool. Kevin Beaver explains how they work and what risk these vulnerabilities present. Continue Reading

By

• Kevin Beaver, Principle Logic, LLC

Risk & Repeat: The TLS 1.3 clock continues to click

In this week's Risk & Repeat podcast, SearchSecurity editors discuss the long wait for TLS 1.3 and the effects -- positive and negative -- the delays have had for enterprise security. Continue Reading

By

• Rob Wright, Senior News Director, Dark Reading

Official TLS 1.3 release date: Still waiting, and that's OK

Protocol scrutiny is good for the upcoming TLS 1.3 update as the process continues to expose, and fix, problems. Continue Reading

By

• Peter Loshin, Former Senior Technology Editor

Get the best botnet protection with the right array of tools

Enterprise anti-botnet defenses, to be effective, must be added in multiple layers. No single security product will do the trick, but the right combo of tools can. Continue Reading

By

• Mike Chapple, University of Notre Dame

Three reasons to implement an NAC system

The growth in devices on the network has heightened the need for network access control products. This article presents scenarios where an enterprise might need an NAC system. Continue Reading

By

• Rob Shapland

How can platform firmware be protected from attacks?

The NIST published guidance on building up platform firmware resiliency. Expert Judith Myerson looks at the NIST guidelines and the major takeaways for enterprises. Continue Reading

By

• Judith Myerson

iOS updates: Why are some Apple products behind on updates?

A study by Zimperium found that more than 23% of iOS devices aren't running the latest software. Matt Pascucci explains how this is possible, even though Apple controls iOS updates. Continue Reading

By

• Matthew Pascucci

Thor's OS Xodus

In this excerpt from chapter one of Thor's OS Xodus, author Timothy "Thor" Mullen discusses OS X, privacy, and online safety. Continue Reading

By

• Syngress & SearchSecurity

Multiple Intel firmware vulnerabilities in Management Engine

Security researchers tested the controversial Intel Management Engine and other products, finding multiple Intel firmware vulnerabilities. Continue Reading

By

• Michael Heller, TechTarget

HTTP Strict Transport Security: What are the security benefits?

Google's use of HTTP Strict Transport Security aims to improve web browsing security. Expert Judith Myerson explains how HSTS can make the internet more secure. Continue Reading

By

• Judith Myerson

Email security issues: How to root out and solve them

Effectively tackling email security issues requires infosec pros to address a broad range of areas, including cloud, endpoints, user training and more. Continue Reading

By

• Kevin Beaver, Principle Logic, LLC

How to prepare for potential IPv6 DDoS attacks

Enterprises learn how to prepare for IPv6 with DDoS attack tools. Michael Cobb further addresses the inevitable attacks and what users can do. Continue Reading

By

• Michael Cobb

WireX botnet: How did it use infected Android apps?

To avoid a mobile device catastrophe, several large tech organizations came together to stop the WireX botnet. Learn how this Android botnet with 300 infected apps was stopped. Continue Reading

By

• Matthew Pascucci

Latest Kaspersky controversy brings new questions, few answers

The Kaspersky controversy continued this week as the antivirus company responded to several explosive news stories about its relationship with the Russian government. Continue Reading

By

• Rob Wright, Senior News Director, Dark Reading

Telerik web UI: Can the cryptographic weakness be mitigated?

A cryptographic weakness was discovered in the Telerik web UI. Expert Judith Myerson alerts readers about this weakness and the alternative options for companies to explore. Continue Reading

By

• Judith Myerson

DOJ's 'responsible encryption' is the new 'going dark'

News roundup: The DOJ calls for 'responsible encryption' to comply with court orders. Plus, there's more bad cybersecurity news for banks, and Accenture data in AWS gets exposed. Continue Reading

By

• Peter Loshin, Former Senior Technology Editor

CISSP Domain 4 quiz: Network security basics

Think you know network security basics inside and out? Take this 10-question quiz to find out how well you’ve prepared for Domain 4 of the CISSP exam. Continue Reading

By

• (ISC) 2

CISSP Domain 4: Communications and network security

Brush up on network security fundamentals like segmentation and secure routing in this CISSP exam study guide for Domain 4, Communication and Network Security. Continue Reading

Dnsmasq server flaws unmasked and patched by Google

News roundup: Google researchers find and patch vulnerabilities in the Dnsmasq server that are used widely in routers and IoT devices. Plus, EU-U.S. Privacy Shield challenge and more. Continue Reading

By

• Peter Loshin, Former Senior Technology Editor

Flash's end of life: How should security teams prepare?

Adobe Flash's end of life is coming, and it includes an incremental removal method, allotting security teams enough time to adjust. Matt Pascucci explains how changes can be made. Continue Reading

By

• Matthew Pascucci

Securing endpoints with supplementary tools protects data

Learn how network access control (NAC), data loss prevention (DLP) and robust data destruction tools secure the data in your corporate endpoints against data loss. Continue Reading

By

• Michael Cobb

Network lateral movement from an attacker's perspective

A security researcher describes the network lateral movement process from an attacker's perspective and a few key points of focus for IT pros, at DerbyCon. Continue Reading

By

• Michael Heller, TechTarget

How can a DDoS reflection attack abuse CLDAP?

A new exploit of CLDAP servers can be used for a DDoS reflection attack that gives attackers a 70x boost. Nick Lewis explains how to defend against this new threat. Continue Reading

By

• Nick Lewis

Are long URLs better for security than short URLs?

Shortened URLs are weak on security and easy for attackers to inject with malware. Expert Judith Myerson discusses how long URLs are more secure, despite the inconvenience. Continue Reading

By

• Judith Myerson

How can users detect dangerous open ports in mobile apps?

Some malicious apps can hijack smartphones and expose those devices with open ports. Expert Michael Cobb explains how this happens and how users can protect themselves. Continue Reading

By

• Michael Cobb

How do network management systems simplify security?

Network security teams can find themselves overwhelmed with protecting an enterprise network. Expert Matthew Pascucci explains how network management systems can help with that. Continue Reading

By

• Matthew Pascucci

HTTPS interception gets a bad rap; now what?

Should products intercept Transport Layer Security connections to gain visibility into network traffic? A new study by researchers and U.S.-CERT warn against it. Continue Reading

By

• Kathleen Richards

What is the best way to secure telematics information?

SMS authentication is often used to secure telematics information, but it may not be strong enough. Expert Judith Myerson discusses why, and how to improve the protection of this data. Continue Reading

By

• Judith Myerson

IoT device security bill mandates security standards

News roundup: U.S. Senators introduce a bipartisan bill to standardize IoT device security for government vendors. Plus, Anthem suffers another data breach, and more. Continue Reading

By

• Madelyn Bacon, TechTarget

A closer look at Kaspersky antimalware protection services

Expert Ed Tittel looks at Kaspersky antimalware product Endpoint Security, which provides multilayered protection against malware, phishing attacks and other exploits. Continue Reading

By

• Ed Tittel

The various offers of Microsoft System Center Endpoint Protection

Expert Ed Tittel examines System Center Endpoint Protection, Microsoft's native Windows antivirus and antimalware security product. Continue Reading

By

• Ed Tittel

Sophos Endpoint Protection and an overview of its features

Expert Ed Tittel examines Sophos Endpoint Protection, an endpoint security platform with antivirus, antimalware and more. Continue Reading

By

• Ed Tittel

What tools were used to hide fileless malware in server memory?

Fileless malware hidden in server memory led to attacks on many companies worldwide. Expert Nick Lewis explains how these attacks fit in with the wider fileless malware trend. Continue Reading

By

• Nick Lewis

Advanced Persistent Security

In this excerpt from chapter seven of Advanced Persistent Security, authors Araceli Treu Gomes and Ira Winkler discuss the different threats facing organizations. Continue Reading

By

• Syngress and SearchSecurity

IPv6 addresses: Security recommendations for usage

IPv6 addresses can be used in a number of ways that can strengthen information security. Expert Fernando Gont explains the basics of IPv6 address usage for enterprises. Continue Reading

By

• Fernando Gont, SI6 Networks

How to detect preinstalled malware in custom servers

Preinstalled malware was reportedly found by Apple in its custom servers. Expert Nick Lewis explains how enterprises can protect themselves from encountering similar issues. Continue Reading

By

• Nick Lewis

The best endpoint security practices are evolving and essential

Ever since the first mobile device hit the enterprise network, best endpoint security practices have been a major IT concern. What's happened since then has been a staggering proliferation of the number and types of devices on the network, complicated by increasing numbers of mobile and remote corporate employees, all of which have essentially ended the traditional idea of a corporate network security perimeter. Firewalls and other more traditional security appliances may still be in use, and rightly so, but endpoint security management is more critical than ever in keeping enterprise systems and data safe from malicious actors.

The summer Insider Edition, our Information Security magazine quarterly e-zine, looks at what's new in endpoint security management, from the best endpoint security tools to consider now, and what other efforts beyond tools infosec pros can employ to best secure all those pesky mobile endpoints wandering in and out of corporate corridors.

This Insider Edition offers expert assessments on the endpoint security technology vendors have developed to combat mutating ransomware like WannaCry -- from machine learning to multivendor partnerships to behavior analytics. Also included is an exploration of mobile endpoint security tools like application containers and app wrapping. CISOs must focus now on how the threats, and the technological advances to fight them, are changing and factor these considerations into any endpoint security strategy.

Readers will come away with a deeper understanding of the best endpoint security tools and techniques available and be able to consider the most advanced approaches available to locking down the company data and systems that endpoints can access.

 Continue Reading

Advanced endpoint protection takes on the latest exploits

Advanced endpoint protection is arriving from all quarters -- machine learning, crafty sandboxes, behavior analytics. Learn how tech advances are being applied to endpoints. Continue Reading

By

• David Geer, Geer Communications

Do thoughts of your least secure endpoint keep you up at night?

Some days, 'secure endpoint' feels like an oxymoron, but that soon may change. From smart sandboxes to advanced behavior analytics, learn what's new in endpoint security technologies. Continue Reading

By

• Brenda L. Horrigan, Executive Managing Editor

Router security issues highlighted by CIA's CherryBlossom project

The latest WikiLeaks release on CIA hacking tools includes the CherryBlossom project, which highlights router security issues, including a lack of firmware signing validation. Continue Reading

By

• Michael Heller, TechTarget

IPv6 update: A look at the security and privacy improvements

The recent IPv6 update from the IETF introduces new security and privacy recommendations. Expert Fernando Gont explains these changes and what they mean for organizations. Continue Reading

By

• Fernando Gont, SI6 Networks

Office 365 security features: As good as it gets?

Online and application security is never perfect, but Office 365 security features come close. Here's an overview of how Microsoft installed security in its popular suite. Continue Reading

By

• Kevin Beaver, Principle Logic, LLC

Researchers port EternalBlue exploit to Windows 10

The EternalBlue exploit behind the WannaCry ransomware attacks has been successfully ported to an older version of Windows 10, but newer versions of the OS are protected. Continue Reading

By

• Michael Heller, TechTarget

IT security trends: 2017 prioritizes cloud, network, endpoints

The 2017 TechTarget IT Priorities Survey reports a number of key IT security trends about where enterprises and infosec professionals place their time and resources. Continue Reading

By

• Diana Hwang

Learn what breach detection system is best for your network

Breach detection systems are essential in these days of machine learning and artificial intellingence. Learn how to identify the features and functions your network needs. Continue Reading

By

• David Geer, Geer Communications

Can BGP anycast addressing be used for DDoS attacks?

The BGP anycast addressing technique could potentially be used for malicious purposes. Expert Judith Myerson explains how this might work and what types of attacks to look out for. Continue Reading

By

• Judith Myerson

Q&A: Juniper's Kevin Walker on data manipulation, ransomware threats

Juniper's Kevin Walker talks with SearchSecurity about the evolving threat landscape and how some attackers are incorporating data manipulation into their schemes. Continue Reading

By

• Rob Wright, Senior News Director, Dark Reading

What is the SS7 protocol and what are its security implications?

The SS7 protocol has been a source of controversy lately because of its security vulnerabilities. Expert Judith Myerson explains what the protocol is and what its issues are. Continue Reading

By

• Judith Myerson

How effective is geofencing technology as a security method?

Geofencing technology is increasingly being used as a security tactic, such as to control access to servers with DNS settings. Expert Michael Cobb explains how it works. Continue Reading

By

• Michael Cobb

Handbook of System Safety and Security

In this excerpt from chapter 10 of Handbook of System Safety and Security, editor Edward Griffor discusses cloud and mobile cloud architecture and security. Continue Reading

By

• SearchSecurity and Syngress

How does Ticketbleed affect session ID security?

The Ticketbleed bug in some F5 Networks products caused session IDs and uninitialized memory to leak. Expert Judith Myerson explains what a session ID is and how attackers use it. Continue Reading

By

• Judith Myerson

DARPA's SSITH program takes aim at hardware vulnerabilities

News roundup: DARPA's SSITH program tackles hardware vulnerabilities for better security. Plus, new risks placed in OWASP Top 10, SWIFT launches new anti-fraud tool, and more. Continue Reading

By

• Madelyn Bacon, TechTarget

Symantec CA woes debated by browser community

Compliance with CA/B Forum Baseline Requirements was debated after Symantec CA posted responses to 14 issues raised by Mozilla developers. Continue Reading

By

• Peter Loshin, Former Senior Technology Editor

Preparing enterprise systems for the scriptless Linux exploit

The scriptless Linux exploit deviates from usual methods that security tools recognize as attacks. Expert Nick Lewis explains how the exploit works and how to prevent it. Continue Reading

By

• Nick Lewis

Risk & Repeat: Google slams Symantec certificates

In this episode of SearchSecurity's Risk & Repeat podcast, editors discuss Google's proposed plan to distrust Symantec certificates following more allegations of mis-issuance. Continue Reading

By

• Rob Wright, Senior News Director, Dark Reading

HTTPS traffic has yet to surpass HTTP traffic, Fortinet study shows

News roundup: HTTPS traffic has yet to surge, despite its security benefits, according to a report. Plus, the latest in the Apple extortion; a Mirai attack lasted 54 hours; and more. Continue Reading

By

• Madelyn Bacon, TechTarget

Android VPN apps: How to address privacy and security issues

New research on Android VPN apps revealed the extent of their privacy and security flaws. Expert Kevin Beaver explains how IT professionals can mitigate the risks. Continue Reading

By

• Kevin Beaver, Principle Logic, LLC

SonicWALL SSL VPN provides security for organizations of any size

The SonicWALL SSL VPN protects remote client devices by creating a secure connection to enterprise networks, with many options for customized security features. Continue Reading

By

• Karen Kent, Trusted Cyber Annex

Cisco IOS SSL VPN offers security through internet routers

Expert Karen Scarfone outlines the features of the Cisco IOS SSL VPN and explains how it secures enterprise communications. Continue Reading

By

• Karen Kent, Trusted Cyber Annex

Chrome backs out of TLS 1.3 support after proxy issues

After Google rolled out the latest version of Chrome, Blue Coat proxy software issues prompt rollback of TLS 1.3 support in latest version of Chrome browser. Continue Reading

By

• Peter Loshin, Former Senior Technology Editor

IoT malware: How can internet-connected devices be secured?

IoT botnet DDoS attacks have been growing in volume and impact. Expert Nick Lewis explains how you can ensure your internet-connected devices are secure from IoT malware. Continue Reading

By

• Nick Lewis

How does BENIGNCERTAIN exploit Cisco PIX firewalls?

The BENIGNCERTAIN exploit affects certain versions of Cisco systems using the IKEv1 protocol. Expert Nick Lewis explains what the protocol does and how the vulnerability works. Continue Reading

By

• Nick Lewis

Connected medical devices spark debate at RSA Conference session

An RSA Conference session on a new attack on connected medical devices led to a spirited debate on vulnerability disclosure and manufacturer responsibility. Continue Reading

By

• Rob Wright, Senior News Director, Dark Reading