Dark Reading:

Survey Seeks to Learn How 2020 Changed Security

Respondents to a new Dark Reading/Omdia survey will be entered into a drawing for a Black Hat Black Card.

Dark Reading:

When Will Cybersecurity Operations Adopt the Peter Parker Principle?

Having a prevention mindset means setting our prevention capabilities to "prevent" instead of relying on detection and response.

Dark Reading:

Expecting the Unexpected: Tips for Effectively Mitigating Ransomware Attacks in 2021

Cybercriminals continually innovate to thwart security protocols, but organizations can take steps to prevent and mitigate ransomware attacks.

Dark Reading:

Despite Heightened Cyber-Risks, Few Security Leaders Report to CEO

A new report suggests that top management at most companies still don't get security.

Dark Reading:

Transmit Security Announces $543M Series A Funding Round

The passwordless technology provider says the funding will be used to increase its reach and expand primary business functions.

Dark Reading:

Chart: Strength in Numbers

More companies are heeding expert advice to beef up their incident-response teams.

Dark Reading:

NSA Funds Development & Release of D3FEND Framework

The framework, now available through MITRE, provides countermeasures to attacks.

Dark Reading:

Identity Eclipses Malware Detection at RSAC Startup Competition

All 10 finalists in the Innovation Sandbox were focused on identity, rather than security's mainstay for the last 20 years: Malware detection.

Dark Reading:

7 Powerful Cybersecurity Skills the Energy Sector Needs Most

Those looking to join the fight might want to polish up or acquire some (or all) of these hottest skills on the market.

Dark Reading:

Does Your Cyberattack Plan Include a Crisis Communications Strategy? 5 Tips to Get Started

Don't overlook crisis communications in your cybersecurity incident response planning.

Dark Reading:

Did Companies Fail to Disclose Being Affected by SolarWinds Breach?

The SEC has sent out letters to some investment firms and publicly listed companies seeking information, Reuters says.

Dark Reading:

Software-Container Supply Chain Sees Spike in Attacks

Attackers target companies' container supply chain, driving a sixfold increase in a year, aiming to steal processing time for cryptomining and compromise cloud infrastructure.

Dark Reading:

Data Leaked in Fertility Clinic Ransomware Attack

Reproductive Biology Associates says the data of 38,000 patients may have been compromised in the April cyberattack.

Dark Reading:

Baltimore County Public Schools' Ransomware Recovery Tops $8M

The school district has spent seven months and a reported $8.1 million recovering from the November attack.

Dark Reading:

Fintech at SaaS Speed

Dark Reading:

Are Ransomware Attacks the New Pandemic?

Ransomware has been a problem for decades, so why is government just now beginning to address it?

Dark Reading:

Attackers Find New Way to Exploit Google Docs for Phishing

Tactic continues recent trend by attackers to use trusted cloud services to send and host malicious content.

Dark Reading:

This Week in Database Leaks: Cognyte, CVS, Wegmans

Billions of records were found exposed this week due to unprotected databases owned by major corporations and third-party providers.

Dark Reading:

Accidental Insider Leaks Prove Major Source of Risk

Research reports highlight growing concerns around insider negligence that leads to data breaches.

Dark Reading:

11 Security Certifications to Seek Out This Summer

The more you know, the more you grow. The Edge takes a fresh look at leading security certifications that can help advance your career.

Dark Reading:

4 Habits of Highly Effective Security Operators

These good habits can make all the difference in advancing careers for cybersecurity operators who spend their days putting out fires large and small.

Dark Reading:

Data Breaches Surge in Food & Beverage, Other Industries

Six previously "under-attacked" vertical industries saw a surge in data breaches last year due to COVID-19 related disruptions and other factors, new data shows.

Dark Reading:

One in Five Manufacturing Firms Targeted by Cyberattacks

Information-stealing malware makes up about a third of attacks, a study finds, but companies worry most about ransomware shutting down production.

Dark Reading:

Carnival Cruise Line Reports Security Breach

The cruise ship operator says the incident affected employee and guest data.

Dark Reading:

Google Launches SLSA, a New Framework for Supply Chain Integrity

The "Supply chain Levels for Software Artifacts" aims to ensure the integrity of components throughout the software supply chain.

Dark Reading:

Cyberattacks Are Tailored to Employees ... Why Isn't Security Training?

Consider four factors and behaviors that impact a particular employee's risk, and how security training should take them into account.

Dark Reading:

Mission Critical: What Really Matters in a Cybersecurity Incident

The things you do before and during a cybersecurity incident can make or break the success of your response.

Dark Reading:

Ukraine Police Disrupt Cl0p Ransomware Operation

Growing list of similar actions in recent months may finally be scaring some operators into quitting, but threat is far from over, security experts say.

Dark Reading:

Ransomware Operators' Strategies Evolve as Attacks Rise

Security researchers find ransomware operators rely less on email and more on criminal groups for initial access into target networks.

Dark Reading:

Biden Tells Putin Critical Infrastructure Sectors 'Off Limits' to Russian Hacking

President Joe Biden said he and Russian President Vladimir Putin agreed to discuss boundaries in cyber activity.

Dark Reading:

Security Flaw Discovered In Peloton Equipment

The vulnerability could give attackers remote root access to the bike's tablet, researchers report.

Dark Reading:

Cars, Medicine, Electric Grids: Future Hackers Will Hit Much More Than Networks in an IT/OT Integrated World

Intelligent systems must include the right cybersecurity protections to prevent physical threats to operational technology.

Dark Reading:

Russian National Convicted on Charges Related to Kelihos Botnet

Oleg Koshkin was arrested in 2019 and faces a maximum penalty of 15 years in prison, the DoJ reports.

Dark Reading:

Is an Attacker Living Off Your Land?

Living-off-the-land attacks pose significant risks to organizations and, on top of that, are difficult to detect. Learn the basics about how these attacks operate and ways to limit their damage.

Dark Reading:

Keeping Your Organization Secure When Dealing With the Unexpected

There's no way to anticipate every possible scenario, but the right approach to business continuity can help you respond effectively in any situation.

Dark Reading:

Don't Get Stymied by Security Indecision

You might be increasing cyber-risk by not actively working to reduce it.

Dark Reading:

Thousands of VMware vCenter Servers Remain Open to Attack Over the Internet

Three weeks after company disclosed two critical vulnerabilities in the workload management utility, many organizations have not patched the technology yet, security vendor says.

Dark Reading:

Microsoft Disrupts Large-Scale BEC Campaign Across Web Services

Attackers had used the cloud-based infrastructure to target mailboxes and add forwarding rules to learn about financial transactions.

Dark Reading:

Security Experts Scrutinize Apple, Amazon IoT Networks

Both companies have done their due diligence in creating connected-device networks, but the pervasiveness of the devices worries some security researchers.

Dark Reading:

Andariel Group Targets South Korean Entities in New Campaign

Andariel, designated as a sub-group of the Lazarus Group APT, has historically targeted South Korean organzations.

Dark Reading:

Deloitte Buys Terbium Labs to Expand Threat Intel Capabilities

Terbium Labs' products and services will become part of Deloitte's Detect & Respond lineup, the company confirms.

Dark Reading:

What Industrial Control System Vulnerabilities Can Teach Us About Protecting the Supply Chain

Older technologies used in industrial and critical infrastructure leave the sector highly vulnerable to attack, but organizations can take steps to better protect themselves.

Dark Reading:

How President Biden Can Better Defend the US From Russian Hacks

Wilson Center cybersecurity expert Meg King pinpoints five ambitious steps the administration should take, including a comprehensive national data breach notification protocol.

Dark Reading:

How Does the Government Buy Its Cybersecurity?

The federal government is emphasizing cybersecurity regulation, education, and defense strategies this year.

Dark Reading:

VPN Attacks Surged in First Quarter

But volume of malware, botnet, and other exploit activity declined because of the Emotet botnet takedown.

Dark Reading:

Cyber Analytics Database Exposed 5 Billion Records Online

In an ironic twist, Cognyte's data alerts customers to third-party data exposures.

Dark Reading:

Google Workspace Adds Client-Side Encryption

Users given control over encryption keys, Google says.

Dark Reading:

New Top 20 Secure-Coding List Positions PLCs as Plant 'Bodyguards'

Best practices guide encompasses integrity, hardening, resilience, and monitoring of PLCs in industrial networks.

Dark Reading:

Know Thy Enemy: Fighting Half-Blind Against Ransomware Won't Work

We lack reliable, representative, actionable data about ransomware's actual scope, scale, and impact. The Ransom Incident Response Network could change that.

Dark Reading:

Name That Toon: Sight Unseen

Feeling creative? Submit your caption in the comments, and our panel of experts will reward the winner with a $25 Amazon gift card.

Dark Reading:

Colonial Pipeline Cyberattack Proves a Single Password Isn't Enough

Since the attack, it's been revealed that it was down to a single password. Yes, ransomware needs to be on your radar -- but a focus on credentials is vital.

Dark Reading:

Trickbot Investigation Shows Details of Massive Cybercrime Effort

Nearly a score of cybercriminals allegedly worked together to create the Trickbot malware and deploy it against more than a million users, an unsealed indictment claims.

Dark Reading:

McDonald's Data Breach Exposed Business & Customer Data

An investigation has revealed company data has been breached in the United States, South Korea, and Taiwan.

Dark Reading:

Details Emerge on How Gaming Giant EA Was Hacked

Hacking group stole source code to FIFA 21 and the company's Frostbite engine.

Dark Reading:

Many Mobile Apps Intentionally Using Insecure Connections for Sending Data

A new analysis of iOS and Android apps released to Apple's and Google's app stores over the past five years found many to be deliberately breaking HTTPS protections.

Dark Reading:

Secure Access Trade-offs for DevSecOps Teams

Thanks to recent advancements in access technologies, everyone can apply identity-based authentication and authorization and zero-trust principles for their computing resources.

Dark Reading:

New Ransomware Group Claiming Connection to REvil Gang Surfaces

"Prometheus" is the latest example of how the ransomware-as-a-service model is letting new gangs scale up operations quickly.

Dark Reading:

'Fancy Lazarus' Criminal Group Launches DDoS Extortion Campaign

The group has re-emerged after a brief hiatus with a new email campaign threatening a DDoS attack against businesses that don't pay ransom.

Dark Reading:

Healthcare Device Security Firm COO Charged With Hacking Medical Center

Vikas Singla, chief operating officer of security firm that provides products and services to the healthcare industry, faces charges surrounding a cyberattack he allegedly conducted against Duluth, Ga.-based Gwinnett Medical Center.

Dark Reading:

JBS CEO Says Company Paid $11M in Ransom

The decision to pay attackers was a difficult one, CEO Andre Nogueira said in a statement.