Dark Reading Daily -- August 21, 2020

10 Resume and Interview Tips from Security Pros

Experts from the DEF CON Career Hacking Village explain how job seekers can build a resume and rock an interview.

Smart-Lock Hacks Point to Larger IoT Problems

Two recent reports on smart-locks vulnerabilities show that IoT vendors have a bigger job to do in ensuring their products are safely deployed and configured.

Twitter Hack: The Spotlight that Insider Threats Need

The high profile attack should spur serious board-level conversations around the importance of insider threat prevention.

Banks and the New Abnormal

Banks have hesitated to adopt many strong security practices, and for understandable reasons. But now is the time to be bold.

Former Uber CSO Charged in Hack Cover-up

The charges stem from a 2016 attack in which 57 million records were breached.

IBM Db2 Flaw Gives Attackers Read/Write Access to Shared Memory

Researchers discover a lack of explicit memory protections around the shared memory used by the Db2 trace facility.

COVID-19: Latest Security News & Commentary

Check out Dark Reading's updated, exclusive news and commentary surrounding the coronavirus pandemic.

Research Casts Doubt on Value of Threat Intel Feeds

Two commercial threat intelligence services and four open source feeds rarely provide the same information, raising questions about how security teams should gauge their utility.

Ransomware Attack on Carnival May Have Been Its Second Compromise This Year

Security vendor Prevailion says it observed signs of malicious activity on the cruise operator's network between at least February and June.

New 'Duri' Campaign Uses HTML Smuggling to Deliver Malware

Researchers who detected the attack explain what businesses should know about the HTML smuggling technique.

EDITORS' CHOICE

Black Hat USA 2020 Recap: Experts Discuss Election Security Questions, but Offer Few Answers

The U.S. election in November is once again expected to be a target of digital adversaries. Experts at Black Hat USA 2020 highlighted the many election security questions authorities must address.

Black Hat USA 2020 Musings: Weird and Wonderful Virtual Events are Here to Stay

Black Hat USA 2020 was nothing like an in-person event, but it was incredibly useful for all involved, providing even the most grizzled industry veterans with fresh perspectives.

NEW FROM THE EDGE

MFA Mistakes: 6 Ways to Screw Up Multifactor Authentication

Fearful of messing up its implementation, many enterprises are still holding out on MFA. Here's what they need to know.

7 New Cybersecurity Vulnerabilities That Could Put Your Enterprise at Risk