Dark Reading Daily -- August 29, 2017

10 Time-Consuming Tasks Security People Hate

Whether it is dealing with false positives, reporting to auditors, or patching software, here's the scut work security people dread.

Massive Android DDoS Botnet Derailed

WireX was being used to launch DDoS attacks against targets in multiple industries; Google removes 300 botnet-related apps from Play Store.

New York's Historic FinSec Regulation Covers DDoS, Not Just Data

Starting today, New York banks and insurers must report to authorities within 72 hours on any security event that has a 'reasonable likelihood' of causing material harm to normal operations.

Cybersecurity: An Asymmetrical Game of War

To stay ahead of the bad guys, security teams need to think like criminals, leverage AI's ability to find malicious threats, and stop worrying that machine learning will take our jobs.

US CERT Warns of Potential Hurricane Harvey Phishing Scams

Be wary of malicious emails purportedly tied to the storm, officials say.

Forcepoint Snaps Up RedOwl

The acquisition aims to bolster Forcepoint's behavioral analytics offerings.

Apple iOS Exploit Takes Complete Control of Kernel

Researcher demonstrates 'severe' ZIVA exploit at Hack in the Box.

ROPEMAKER Attack Turns Benign Emails Hostile Post-Delivery

The intersection of email and Web technologies has given attackers a way to mess with your email after it has been delivered to your inbox, Mimecast says.

Google Removes 500 Android Apps Following Spyware Scare

Android apps embedded with an advertising software development kit removed after researchers discover its potential for stealing users' caller data.

EDITORS' CHOICE

Antivirus: From Stand-Alone Product to Endpoint Feature

Endpoint experts discuss the evolution of AV and its shift from stand-alone product to a feature in broader security tools.

Video from the DR News Desk

Insecure IoT Devices Pose Physical Threat to General Public

At the car wash, look out for attack robots. Billy Rios discusses how IoT devices could be hacked to physically attack people -- not just on factory floors, but in everyday public settings.

Security Vulnerabilities: The Next Wave