Dark Reading Weekly -- October 21, 2021

'Clumsy' BlackByte Malware Reuses Crypto Keys, Worms Into Networks

Discovered during a recent incident response engagement, the malware avoids Russian computers and uses a single symmetric key for encrypting every compromised system.

(ISC)² Plans Entry-Level Certification for Aspiring Security Pros

The certification aims to help new entrants to the security field with professional development and career paths early on.

JavaScript Packing Found in More Than 25% of Malicious Sites

Obfuscation techniques are extremely prevalent, data shows, but they can't be used as a single indicator of compromise because legitimate websites use them.

Damages Escalate Rapidly in Multiparty Data Breaches

Analysis of the top-50 multiparty attacks over the past decade finds that nation-state-linked hackers focused on disruption and using stolen credentials cause the most damage.

Enterprise Data Storage Environments Riddled With Vulnerabilities

Many organizations are not properly protecting their storage and backup systems from compromise, new study finds.

Penetration Testing in the Cloud Demands a Different Approach

Attackers use a different set of techniques to target the cloud, meaning defenders must think differently when pen testing cloud environments.

The Ransomware Payment Dilemma: Should Victims Pay or Not?

It's time to steer the conversation away from whether payment bans should be implemented to how and when they should take effect.

The Human Element Is the Weakest Link

While the recent Facebook outage was a major inconvenience, the impact of leaked business operations documents is a much bigger issue than being down for a few hours.

Deepfake Audio Scores $35M in Corporate Heist

A combination of business email compromise and deepfake audio led a branch manager to transfer millions to scammers, in a case that serves as a warning to organizations.

Name That Toon: Bone Dry

Feeling creative? Submit your caption and our panel of experts will reward the winner with a $25 Amazon gift card.

The Simmering Cybersecurity Risk of Employee Burnout

Why understanding human behavior is essential to building resilient security systems.

EDITORS' CHOICE

10 Hot Red Team Tools Set to Hit Black Hat Europe

The slate of Arsenal presentations at Black Hat Europe is set to feature lots of low-cost and free goodies for offensive security pros.

From Help Desk to Head of SOC: Building a Cybersecurity Career on Empathy and Candor

Why a passion for helping people is key to delivering effective cybersecurity solutions.

LATEST FROM THE EDGE

Digging Deep Into the Top Security Certifications

When it comes to technical certifications, which ones pay off so you can get that infosec job or more money for the one you're already doing?

LATEST FROM DR TECHNOLOGY

How AI Can Stop Zero-Day Ransomware

Ransomware attacks are unpredictable. AI is better at figuring out what looks malicious and abnormal than humans will ever be.

How Enterprises are Attacking the Cybersecurity Problem