Profile of Kelly Sheridan

Staff Editor, Dark Reading Member Since: 11/15/2013
Author
News & Commentary Posts: 862
Comments: 5

Kelly Sheridan is the Staff Editor at Dark Reading, where she focuses on cybersecurity news and analysis. She is a business technology journalist who previously reported for InformationWeek, where she covered Microsoft, and Insurance & Technology, where she covered financial services. Sheridan earned her BA in English at Villanova University. You can follow her on Twitter @kellymsheridan.

Natural Language Processing Fights Social Engineers

6/29/2018
Instead of trying to detect social engineering attacks based on a subject line or URL, a new tool conducts semantic analysis of text to determine malicious intent.
Post a Comment

65% of Resold Memory Cards Still Pack Personal Data

6/28/2018
Analyzed cards, mainly from smartphones and tablets, contained private personal information, business documentation, audio, video, and photos.
Post a Comment

Coin Miner Malware Spikes 629% in 'Telling' Q1

6/27/2018
Drastic growth suggests adversaries are learning how they can maximize rewards with minimal effort.
Post a Comment

'Have I Been Pwned' Now Built into Firefox, 1Password

6/26/2018
Users can search breach data in a new tool called Firefox Monitor and check if passwords have been exposed in 1Password on the Web.
Post a Comment

Black Hat Survey: Enterprise Tech, US Government Unprepared for Cyberattacks

6/26/2018
The 2018 Black Hat Attendee survey reveals worries over the effectiveness of enterprise security technology, and threat to US infrastructure.
Post a Comment

Malware in South Korean Cyberattacks Linked to Bithumb Heist

6/25/2018
Lazarus Group is likely behind a spearphishing campaign containing malicious code to download Manuscrypt malware.
Post a Comment

Cracking Cortana: The Dangers of Flawed Voice Assistants

6/22/2018
Researchers at Black Hat USA will show how vulnerabilities in Microsoft's Cortana highlight the need to balance security with convenience.
Post a Comment

Microsoft Office: The Go-To Platform for Zero-Day Exploits

6/21/2018
Malicious Office documents are the weapon of choice among cybercriminals, who use files to access remotely hosted malicious components.
Post a Comment

'Hidden Tunnels' Help Hackers Launch Financial Services Attacks

6/20/2018
Hackers are using the infrastructure, meant to transmit data between applications, for command and control.
Post a Comment

Intel VP Talks Data Security Focus Amid Rise of Blockchain, AI

6/20/2018
Intel vice president Rick Echevarria discusses the challenges of balancing data security with new technologies like blockchain and artificial intelligence.
Post a Comment

The Best and Worst Tasks for Security Automation

6/20/2018
As with all new tech, there are good times and and bad times to use it. Security experts share which tasks to prioritize for automation.
Post a Comment

'Olympic Destroyer' Reappears in Attacks on Europe, Russia

6/19/2018
The attack group known for targeting the 2018 Winter Olympics has resurfaced in campaigns against European financial and biochem companies.
Post a Comment

'Wallchart' Phishing Campaign Exploits World Cup Watchers

6/18/2018
The details on a phishing attack designed to lure soccer fans with a subject line about the World Cup schedule and scoresheet.
Post a Comment

Demystifying Mental Health in the Infosec Community

6/14/2018
Security experts talk about burnout, diversity, mental health, and legal issues in a new Community track at Black Hat USA.
Post a Comment

Blockchain All the Rage But Comes With Numerous Risks

6/13/2018
Researchers dig into four types of cyberattacks targeting blockchain, how they work, and why early adopters are the easiest targets.
Post a Comment

Microsoft Fixes 11 Critical, 39 Important Vulns

6/12/2018
The most critical vulnerability, experts say, affects Windows Domain Name Systems, while another lets attackers hack Cortana from the lock screen.
Post a Comment

MacOS Bypass Flaw Lets Attackers Sign Malicious Code as Apple

6/12/2018
A security bypass weakness in macOS APIs let attackers impersonate Apple to sign malicious code and evade third-party security tools.
Post a Comment

Security Ratings Answer Big Questions in Cyber Insurance

6/11/2018
More insurers are teaming up with security ratings firms to learn more about their clients, define policies, and determine coverage.
Post a Comment

Fewer Phishing Attacks Hit More Diverse Targets

6/11/2018
Nearly 300 brands were hit with phishing attacks in Q1, with cloud storage providers now among the top 10 most targeted.
Post a Comment

Bug Bounty Payouts Up 73% Per Vulnerability: Bugcrowd

6/7/2018
Bug bounty programs grew along with payouts, which averaged $781 per vulnerability this year, researchers report.
Post a Comment

Adobe Issues Emergency Patch for Flash Zero-Day

6/7/2018
Adobe has patched four security vulnerabilities today, including a zero-day being actively exploited in the wild.
Post a Comment

Operation Prowli Hits 40K with Traffic Monetization, Cryptomining

6/6/2018
The campaign targets services including Drupal CMS sites, DSL modems, vulnerable IoT devices, and servers with an open SSH port.
Post a Comment

Dark Web Marketplaces Dissolve Post-AlphaBay, Hansa Takedown

6/5/2018
Cybercrime marketplaces reshape into smaller forums and individual chats as threat actors find new ways to evade law enforcement.
Post a Comment

Phishing Scams Target FIFA World Cup Attendees

6/4/2018
Soccer-themed emails and Web pages target fans with fake giveaways and the chance to snag overpriced, illegitimate 'guest tickets.'
Post a Comment

Web Application Firewalls Adjust to Secure the Cloud

6/4/2018
Cloud-based WAFs protect applications without the costs and complexity of on-prem hardware. Here's what to keep in mind as you browse the growing market.
Post a Comment

Google Groups Misconfiguration Exposes Corporate Data

6/1/2018
Researchers say as many as 10,000 businesses are affected by a widespread misconfiguration in Google Groups settings.
Post a Comment