Dark Reading is part of the Informa Tech Division of Informa PLC
This site is operated by a business or businesses owned by Informa PLC and all copyright resides with them.Informa PLC's registered office is 5 Howick Place, London SW1P 1WG. Registered in England and Wales. Number 8860726.
|
4 Traits of a Cyber-Resilient Culture
Companies with a solid track record of cybersecurity share these practices and characteristics.
'Torii' Breaks New Ground For IoT Malware
Stealth, persistence mechanism and ability to infect a wide swath of devices make malware dangerous and very different from the usual Mirai knockoffs, Avast says.
FBI IC3 Warns of RDP Vulnerability
Government agencies remind users that RDP can be used for malicious purposes by criminal actors.
50M Facebook Accounts Exposed Due to Software Vulnerability
A vulnerability in Facebook's 'View As' feature could have exposed the personal information of 50 million of the social network's users.
Facebook Hacked, 50 Million Users Affected
A vulnerability in Facebook's "View As" feature let attackers steal security tokens linked to 50 million accounts, the company confirms.
How Data Security Improves When You Engage Employees in the Process
When it comes to protecting information, we can all do better. But encouraging a can-do attitude goes a long way toward discouraging users' risky behaviors.
Majority of Cyber Attacks Against Small Businesses Can Cost $500K
For the majority of small and midsized businesses, a cyber attack can cost a company $500,000, although some incidents can skyrocket to $2.5 million, according to a report from Cisco.
Magecart Group Likely Behind Increase in Formjacking Attacks
A recent analysis by Symantec researchers has found a significant increase in formjacking attacks. The reason, according to some, is an increase in activity from the Magecart group.
7 Most Prevalent Phishing Subject Lines
The most popular subject lines crafted to trick targets into opening malicious messages, gleaned from thousands of phishing emails.
Russia's Sednit Deploys First Firmware-Level Rootkit in the Wild
The advanced persistent threat group's LoJax can install malware capable of surviving both OS reinstallation and hard disk replacement.
Ransomware Attack Hits Port of San Diego
The attack began Monday and continues to have an impact on services at the port.
How to Keep Up Security in a Bug-Infested World
Good digital hygiene will lower your risk, and these six tips can help.
Twitter Bug May Have Exposed Millions of DMs
The year-long bug could have compromised interactions between customers and businesses, the social media firm reports.
Security Flaw Found in Apple Mobile Device Enrollment Program
Authentication weakness in Apple's DEP could open a window of opportunity for attackers.
Alphabet's Chronicle Releases VirusTotal Enterprise
Chronicle, the cybersecurity business under Alphabet, releases a major update to VirusTotal geared toward corporate threat hunters.
Managing Data the Way We Manage Money
In the data-driven enterprise, myriad types of data have become a new form and flow of currency. Why, then, hasn't the CISO achieved parity with the CFO?
VPNFilter Is 'Swiss Army Knife' of Malware
A report from Cisco Talos finds that the VPNFilter malware, which infected some 500,000 routers worldwide, is even more versatile than previously thought, thanks to seven additional third-stage modules.
Google to Let Users Disable Automatic Login to Chrome
The decision comes days after security researcher had blasted company for jeopardizing user privacy with browser update.
Verizon Study Finds PCI DSS Compliance Falls Worldwide
Verizon's report says that fewer businesses are complying with the PCI DSS payment standard despite the rising threat of security breaches and consumer data theft.
Uber Settles With California Authorities Over 2016 Data Breach
Uber has agreed to pay the California Attorney General and the San Francisco District Attorney $148 million to settle charges stemming from the 2016 data breach.
Critical Linux Kernel Flaw Gives Root Access to Attackers
All versions of Red Hat Enterprise Linux, CentOS vulnerable to 'Mutagen Astronomy' flaw, according to Qualys.
Inside Microsoft Azure Sphere
Microsoft engineer details how the company's IoT security solution operates - at multiple layers starting with the microcontroller.
Uber Agrees to Pay $148 Million in Nationwide Settlement
Ride-sharing company settles legal cases with 50 states and the District of Columbia for its handling of 2016 data breach.
VPNFilter Evolving to Be a More Dangerous Threat
VPNFilter malware is adding capabilities to become a more fully-featured tool for threat actors.
SEC Slams Firm with $1M Fine for Weak Security Policies
This is the first SEC enforcement cracking down on violation of the Identity Theft Red Flags Rule, intended to protect confidential data.
A 'Cyber Resilience' Report Card for the Public Sector
Government agencies are making great strides in defending themselves against cyberattacks, according to new research from Accenture. But technology alone won't solve the problem.
Owning Security in the Industrial Internet of Things
Why IIoT leaders from both information technology and line-of-business operations need to join forces to develop robust cybersecurity techniques that go beyond reflexive patching.
Cryptomining Malware Continues to Surge as Cybercriminals Cash In
The latest research by McAfee Labs shows that cybercriminals are still raking in big bucks from cryptomining malware. Ransomware also continues to plague enterprises.
Mirai Authors Escape Jail Time – But Here Are 7 Other Criminal Hackers Who Didn't
Courts are getting tougher on the cybercrooks than some might realize.
USB Drives Remain Critical Cyberthreat
USB thumb drives may be used less frequently than before, but they are still commonly used as infection vectors for a wide variety of malware.
Adwind RAT Squeaks Past Linux, Windows, macOS Defenses
A newer version of the Adwind 3.0 Trojan can elude the AV defenses of Linux, Windows and macOS systems, according to Talos and ReversingLabs.
Ex-NSA Developer Gets 5 1/2-Year Prison Sentence
Nghia Hoang Pho, who illegally took home classified NSA information, also sentenced to three years of supervised release after prison term.
The Cyber Kill Chain Gets a Makeover
A new report demonstrates how the cyber kill chain is consolidating as criminals find ways to accelerate the spread of their targeted cyberattacks.
Cryptomining Malware Continues Rapid Growth: Report
Cryptomining malware is the fastest-growing category of malicious software, according to a new report.
The Cloud Security Conundrum: Assets vs. Infrastructure
The issue for cloud adopters is no longer where your data sits in AWS, on-premises, Azure, Salesforce, or what have you. The important questions are: Who has access to it, and how is it protected?
Payment Security Compliance Takes a Turn for the Worse
This is the first time in six years that Verizon's "Payment Security Report" shows a downward trend, leaving cardholders vulnerable.
United Nations' Websites Besieged by Data Leaks, Exposed Files
In time for the UN's General Assembly this week, two reports find that the United Nations' websites have been leaking data for months, thanks to unsecured files and applications.
The Human Factor in Social Media Risk
Your employees need help recognizing the warning signs and understanding how to protect themselves online.
Zero Trust & Network Segmentation: Keys to Securing IoT
As IoT devices become more popular both in the home and within businesses, enterprises need new approaches to security. Here's how zero trust and network segmentation can be combined to create a more robust defense.
iOS 12: How Apple Keeps Getting Mobile Security Wrong
Are iOS updates for suckers? Apple's iOS 12 may represent the latest in a series of flawed releases that could compound user mistrust – further training the company's users to delay updates and patches.
Fault-Tolerant Method Used for Security Purposes in New Framework
A young company has a new patent for using fault tolerance techniques to protect against malware infection in applications.
In Quiet Change, Google Now Automatically Logging Users Into Chrome
The change is a complete departure from Google's previous practice of keeping sign-in for Chrome separate from sign-ins to any Google service.
Microsoft Deletes Passwords for Azure Active Directory Applications
At Ignite 2018, security took center stage as Microsoft rolled out new security services and promised an end to passwords for online apps.
6 Dark Web Pricing Trends
For cybercriminals, the Dark Web grows more profitable every day.
'Scan4you' Operator Gets 14-Year Sentence
The counter antivirus service, which was shut down in 2016, caused a total loss amount of $20.5 billion, according to the DoJ.
Hacking Back: Simply a Bad Idea
While the concept may sound appealing, it's rife with drawbacks and dangers.
Microsoft Looks to End the Era of Security Passwords
At its Ignite show this week, Microsoft plans to update its users on a number of security products and updates, including a plan to eliminate passwords for good through its Authenticator app, which works with Azure.
Malicious Bot-Enabled, Credential-Stuffing Jamming Networks
A research report from Akamai finds the number of bot-enabled, credential-stuffing incidents has spiked in recent months, jamming networks with malicious traffic.
The 'Opsec Fail' That Helped Unmask a North Korean State Hacker
How Park Jin Hyok – charged by the US government for alleged computer crimes for the Sony, Bank of Bangladesh, WannaCry cyberattacks – inadvertently blew his cover via email accounts.
Romanian Hacker Pleads Guilty for Role in Inauguration Surveillance Ransomware
Attack against the Metropolitan Police Department was disrupted before malware could be sent to additional systems.
|
How Enterprises are Attacking the Cybersecurity ProblemConcerns over supply chain vulnerabilities and attack visibility drove some significant changes in enterprise cybersecurity strategies over the past year. Dark Reading's 2021 Strategic Security Survey showed that many organizations are staying the course regarding the use of a mix of attack prevention and threat detection technologies and practices for dealing with cyber threats.
Incident Readiness and Building Response Playbook
In this special report, learn the Xs and Os of any good security incident readiness and response playbook.
Tweet This
0 Comments
