FreshRSS

πŸ”’
❌ About FreshRSS
There are new available articles, click to refresh the page.
Before yesterdayDark Reading:

Password Reuse Problems Persist Despite Known Risks

By Robert Lemos, Contributing Writer
The vast majority of users worry about compromised passwords, but two-thirds continue to use the same password or a variation, a survey finds.

  • September 22nd 2021 at 22:30

What Are the Different Types of Cyber Insurance?

By Isabelle Dumont, Vice President of Market Engagement, Cowbell Cyber
Even with the best cybersecurity defenses in place, organizations can fall victim to a cyberattack.

  • September 22nd 2021 at 22:11

6 Lessons From Major Data Breaches This Year

By Jai Vijayan, Contributing Writer
Though many incidents stemmed from familiar security failures, they served up β€” or resurfaced β€” some important takeaways.

  • September 22nd 2021 at 22:01

Who Is BlackMatter?

By Kelly Sheridan, Senior Editor
Researchers piece together the origins of the group that made headlines this week as the perpetrator behind a ransomware attack on New Cooperative.

  • September 22nd 2021 at 20:50

UK MoD Data Breach Shows Cybersecurity Must Protect Both People and Data

By Maxine Holt, Research Director, Omdia
The UK MoD has failed to protect personally identifiable information (PII) for Afghan interpreters; the incident highlights how avoidable cybersecurity mistakes can have devastating consequences.

  • September 22nd 2021 at 20:45

A Cyber-Resilience Model for the Next Era

Digital dilemmas have driven security to the forefront of business leaders' priorities. Understanding how to provide security at the speed of change and build a cyber-resilient organization will drive competitive advantage and help organizations run and transform with ease.
  • September 22nd 2021 at 19:00

Strained Relationships Hinder DevSecOps Innovation

By Dark Reading Staff, Dark Reading
A new survey from Forrester and VMware finds more than half of developers still think security gets in the way.

  • September 22nd 2021 at 17:37

CISA, FBI, NSA Warn of Increase in Conti Ransomware Attacks

By Dark Reading Staff, Dark Reading
A new alert provides the technical details of ongoing attacks and guidance for organizations to secure systems against Conti.

  • September 22nd 2021 at 17:35

Midmarket Security: Think You’re Safe? Think Again

By Tim Liu, Co-founder and CTO at Hillstone Networks
Gone is the false perception that large enterprises, banks, and financial institutions are the only organizations under attack.

  • September 22nd 2021 at 17:00

CyberGRX Shows Organizations Fail to Mitigate Third-Party Risk

Independent Research Firm uncovers that significant events would need to happen for organizations to elevate the importance of third-party cyber-risk mitigation strategies.
  • September 22nd 2021 at 15:30

Why Security Pros Should Rethink Their Focus on Information Resilience

By Sounil Yu, CISO and Head of Research of JupiterOne
Resilience is often defined as being able to withstand disruptions and rebound to a previous state. But a system's ability to return to a prior state doesn't mean it's sufficiently resilient.

  • September 22nd 2021 at 14:00

Druva Introduces Curated Recovery Technology for Accelerated Ransomware Recovery

Combining this comprehensive ransomware recovery module with Druva's built-in security framework, businesses can now better protect critical data and recover faster with confidence.
  • September 22nd 2021 at 05:45

Synology Releases C2 Backup for Windows

Synology launches C2 Backup, providing powerful and efficient data protection for Windows devices.
  • September 22nd 2021 at 05:25

New Cooperative's Ransomware Attack Underscores Threat to Food & Agriculture

By Kelly Sheridan, Senior Editor
The Iowa grain cooperative took its systems offline in response to a security incident earlier this week.

  • September 21st 2021 at 21:20

CTO 2.0: Maiffret Rejoins BeyondTrust

By Kelly Jackson Higgins, Executive Editor
Hacker-turned-entrepreneur Marc Maiffret reflects on his past few years "embedded" with enterprise security teams and how it has shaped his security view.

  • September 21st 2021 at 20:49

10 Threat Trends in DNS Security

By Ben Nahorney, Threat Intelligence Analyst, Cisco Security
Cisco Security examines Cisco Umbrella data for trends in malicious DNS activity during 2020.

  • September 21st 2021 at 18:50

US Treasury Dept. Sanctions Suex Cryptocurrency Exchange

By Dark Reading Staff, Dark Reading
Sanctions are a result of Suex's role in facilitating transactions for ransomware attackers., officials say.

  • September 21st 2021 at 18:35

Data Sharing, Added Security Steps Drive Consumers to Shop Elsewhere

By Dark Reading Staff, Dark Reading
A new survey finds most shoppers will stop a transaction if asked for too much personal information or to complete many security steps.

  • September 21st 2021 at 17:54

5 Ways to Become a Better Cyber-Threat Exterminator

By Mike Wilkes, Chief Information Security Officer at SecurityScorecard
Tactical threat intelligence feeds directly into security operations and helps tighten existing security controls and improve incident response times.

  • September 21st 2021 at 17:25

Elizabeth Kolade on How AI Is a 'Double-Edged Sword' & the Challenge of Harmonizing Cyber and Physical Security

By IFSEC Global Staff, Part of the Informa Network
An analyst at the Defence Space Administration, Nigeria, Elizabeth Kolade was named in the list of 'One to watch: Security' for the IFSEC Global Influencers in Security and Fire 2021. Julian Hall put some quickfire questions to her on the trends and issues she's witnessing in the sector.

  • September 21st 2021 at 17:00

Why Cryptomining Malware Is a Harbinger of Future Attacks

By Ricardo Villadiego, Founder and CEO of Lumu
Crypto thieves rely on users not noticing installation of their tiny payload on thousands of machines, or the CPU cycles being siphoned off to perpetuate the schemes.

  • September 21st 2021 at 14:00

Open Source Software Projects Up Their Security Game but Face More Attacks

By Robert Lemos, Contributing Writer
Patches for dependencies are trickling up through the open source ecosystem faster than ever β€” a good thing because attackers are focusing more on open source software.

  • September 20th 2021 at 21:53

archTIS Acquires Cipherpoint Technology Assets and Customers

Accretive asset purchase adds to archTIS’ rapidly growing annual recurring revenue, global distribution and industry-leading intellectual property.
  • September 20th 2021 at 21:31

10 Ways to Avoid Zero-Trust Failure

By Ericka Chickowski, Contributing Writer
Here are the prerequisites to have in order before getting past the zero-trust gate.

  • September 20th 2021 at 19:30

Google: New Privacy Feature Will Affect 'Billions' of Android Devices

By Dark Reading Staff, Dark Reading
Starting in December, Google will expand its "permissions auto-reset feature" to devices using Android 6.0 and higher.

  • September 20th 2021 at 18:30

F5 Networks to Buy Threat Stack

By Dark Reading Staff, Dark Reading
F5 Networks plans to combine its application and API security tools with Threat Stack's cloud protection capabilities.

  • September 20th 2021 at 18:25

White House Cybersecurity Summit: A Missed Opportunity

By Nick Cappi, Cyber Vice President, Portfolio Strategy & Enablement, at Hexagon PPM
Last month's summit with the president was missing something crucial: representation from those who deal with critical infrastructure.

  • September 20th 2021 at 14:00

Arista, Cisco, Huawei, Juniper Networks, and Nokia Launch New MANRS Equipment Vendor Program to Improve Routing Security Worldwide

Founding members of the MANRS Initiative will tackle the systemic vulnerabilities of global routing security through groundbreaking collaborative action.
  • September 17th 2021 at 21:38

CISA to Host Fourth Annual National Cybersecurity Summit

Registration is now open for the October event.
  • September 17th 2021 at 21:35

How Should the CSO Work With the Chief Privacy Officer?

By Chris Bush, Chief Customer Officer, Black Kite
The chief security officer needs to be in constant communication with the chief privacy officer about what's working or not working.

  • September 17th 2021 at 21:29

Mirai Botnet Exploiting OMIGOD Azure Vulnerability

By Dark Reading Staff, Dark Reading
Microsoft patched four Open Management Infrastructure flaws earlier this week.

  • September 17th 2021 at 20:05

International Insider Threat: DoJ Fines US Intel Officials Who Aided UAE

By Kelly Sheridan, Senior Editor
Three former US intelligence operatives have been fined $1,685,000 for aiding the United Arab Emirates in widespread hacking campaigns.

  • September 17th 2021 at 18:30

IoT 'Nutrition' Labels Aim to Put Security on Display

By Robert Lemos, Contributing Writer
NIST has laid the groundwork for an easy-to-understand way to communicate to consumers the security of software and connected devices.

  • September 17th 2021 at 15:33

New Report Examines Top Threats Discussed at Black Hat USA

By Dark Reading Staff, Dark Reading
Supply chain security and vulnerabilities in enterprise software were among the threats most dicussed at this year's show, survey data reveals.

  • September 17th 2021 at 15:25

Infrastructure, Security, and the Need for Visibility

By Joe Slowik, Senior Manager at Gigamon
Government authorities are increasingly trying to bolster critical infrastructure security. But investments in next-generation solutions won't go far enough without also addressing security and operational fundamentals.

  • September 17th 2021 at 14:00

Microsoft Warns of Uptick in MSHTML Attacks

By Jai Vijayan, Contributing Writer
Attackers leveraging the flaw are using infrastructure associated with other criminal groups, including ransomware-as-a-service operators, the company says.

  • September 16th 2021 at 21:57

HPE Survey Finds 76% of Doctors and Nurses Believe Telehealth Will Dominate Patient Care in Near Future

Findings are presented in HPE's "Future of Healthcare" Report, which surveyed healthcare clinicians and IT Decision Makers (ITDMs) in the United States and United Kingdom.
  • September 16th 2021 at 21:27

15% of the Nasdaq 100 Is Highly Susceptible to a Ransomware Attack, New Black Kite Research Finds

Black Kite’s Ransomware Susceptibility Index (RSI) determined that 1-in-7 Nasdaq-100 companies ranked as highly susceptible to a ransomware attack.
  • September 16th 2021 at 21:24

TransUnion to Buy Neustar for $3.1B

By Dark Reading Staff, Dark Reading
TransUnion, primarily known for credit ratings, hopes to expand into digital marketing and fraud mitigation capabilities with the deal.

  • September 16th 2021 at 18:58

FBI, CISA, CGCYBER Warn of APTs Targeting CVE-2021-40539

By Dark Reading Staff, Dark Reading
The critical authentication bypass vulnerability exists in Zoho ManageEngine ADSelfService Plus, officials report.

  • September 16th 2021 at 18:50

Grappling With Growth, Employee Needs, and Security Amid a Return to Offices

By Shane Buckley, President & Chief Operating Officer, Gigamon
As organizations strive for a new version of business-as-usual, executives must prepare for challenges around infrastructure, varying guidelines, and balancing employee flexibility with office collaboration.

  • September 16th 2021 at 17:00

Under Pressure: COVID-19 Forced Many Execs to Sideline Cybersecurity

By Marc Wilczek, Digital Strategist & COO of Link11
CISOs are more stressed, and the fallout is increased cyber-risk. Also, budget restrictions lead to a yawning chasm between need and funding.

  • September 16th 2021 at 14:00

How Attackers Invest in Cloud-Focused Cybercrime

By Jai Vijayan, Contributing Writer
A new study reveals an active underground market for access credentials to tens of thousands of cloud accounts and resources.

  • September 15th 2021 at 22:45

OWASP Reshuffles Its Top 10 List, Adds New Categories

By Robert Lemos, Contributing Writer
The Open Web Application Security Project reshuffles its list of top threats, putting broken access controls and cryptographic failures at the top and creating three new risk categories.

  • September 15th 2021 at 21:40

OMIGOD: Azure Users Warned of Critical OMI Vulnerabilities

By Kelly Sheridan, Senior Editor
Security researchers share the details of four flaws in Open Management Infrastructure, which is deployed on a large number of Linux virtual machines in Azure.

  • September 15th 2021 at 20:52

A Ransomware Recovery Plan That's Solid Gold

By Tom Fetters, North American Vice President for Global Digital Solutions, Iron Mountain
Having a gold copy of critical data offline is essential in every organization's disaster recovery or continuity plan. Follow the 3-2-1-1 rule to secure your data.

  • September 15th 2021 at 20:40

ExpressVPN Acquired By Kape Technologies for $936 Million

By Dark Reading Staff, Dark Reading
Privacy firm Kape says deal will double customer base and broaden reach into consumer VPN market

  • September 15th 2021 at 17:16

How Your Printer Is Like Swiss Cheese

By Chris Rouland, Co-Founder and Chief Executive Officer at Phosphorus Cybersecurity
Follow these best practices to avoid the security holes created by these often-overlooked, but ubiquitous, devices.

  • September 15th 2021 at 17:00

Microsoft Lets Users Fully Remove Account Passwords

By Dark Reading Staff, Dark Reading
Users can now delete passwords from their Microsoft account and instead use Windows Hello, Microsoft Authenticator, or physical security keys to log in.

  • September 15th 2021 at 15:40

Purchasing Managed Security Services: Strategies for Client References

By Bob Blakley, Senior Director, Global Security Services
There's a scarcity of customers using managed security services who are willing to talk to others about their experiences. Here's how to work with your vendor(s) to leverage their customers' experiences and hard-won wisdom.

  • September 15th 2021 at 14:00

Don't Try to Outsmart Cybercriminals. Outnumber Them!

Why hasn't a problem that's lasted for more than 40 years been solved after hundreds of billions of dollars have been spent? Let's take a new approach.
  • September 15th 2021 at 13:00

Microsoft Patches MSHTML Vuln Among 66 CVEs

By Kelly Sheridan, Senior Editor
This month's Patch Tuesday release addresses a remote code execution bug under active attack and a publicly known flaw in Windows DNS.

  • September 14th 2021 at 21:55

API Security Startup Neosec Launches With $20.7M Series A

By Kelly Sheridan, Senior Editor
Neosec, founded by the security experts behind LightCyber, aims to bring principles from extended detection and response to API security.

  • September 14th 2021 at 21:24

Ransomware Operators Ramp Up Pressure on Victims via Multiple Extortion Attacks

By Jai Vijayan, Contributing Writer
Though overall ransomware attack volumes dipped in the first half of this year, the number of campaigns involving three and four extortion methods increased.

  • September 14th 2021 at 21:09

Name That Toon: Congrats! It's a ...

By John Klossner, Cartoonist
Feeling creative? Submit your caption and our panel of experts will reward the winner with a $25 Amazon gift card.

  • September 14th 2021 at 19:30

Reported Rates of Major Security Incidents by Market

By Gedeon Hombrebueno, Product Marketing Manager, Cisco
In the "Proven Success Factors for Endpoint Security" report, Cisco Security shares a global perspective on reported cyber events in the past two years.

  • September 14th 2021 at 18:25

Google Patches Chrome Bugs Exploited in the Wild

By Dark Reading Staff, Dark Reading
CISA advises organizations to patch quickly to protect against zero-day exploits.

  • September 14th 2021 at 17:55

Outlining Risks to the World's Vital Cyber-Physical Systems

By Richard Searle, Customer Solutions Director at Fortanix
The key to protecting these systems is not only to ensure the control environment is secure and protected but also to deploy emerging technologies such as confidential computing.

  • September 14th 2021 at 17:00

Nearly 50% of On-Premises Databases Have Vulnerabilities

By Robert Lemos, Contributing Writer
A network compromise shouldn't mean "game over" for corporate data, but survey data shows many companies fail to protect their crown jewels.

  • September 14th 2021 at 16:30

DHS Secretary Mayorkas Headlines Billington Cybersecurity Summit

DHS Secretary Mayorkas joins 130+ cyber experts at Billington Cybersecurity Summit that explores ransomware, 5G, zero trust, and more.
  • September 14th 2021 at 15:29
❌