Dark Reading Weekly -- March 26, 2020

200M Records of US Citizens Leaked in Unprotected Database

Researchers have not determined who owns the database, which was one of several large exposed instances disclosed this week.

How Attackers Could Use Azure Apps to Sneak into Microsoft 365

Researchers warn Microsoft 365 account holders to pay attention to unknown applications that request permissions.

Cybercriminals' Promises to Pause During Pandemic Amount to Little

As pandemic worsens, online profiteering -- from fraudsters to ransomware operators to cybercriminal hacking -- continues unabated, despite some promises from the underground.

Missing Patches, Misconfiguration Top Technical Breach Causes

Less than half of businesses surveyed can patch critical vulnerabilities within 72 hours. Why does the process take so long?

Do DevOps Teams Need a Company Attorney on Speed Dial?

In today's regulatory and legislative environment, companies and individuals are exposed to lawsuits over security breaches, resulting in significant fines and ending careers.

How to Secure Your Kubernetes Deployments

As more companies shift their software to a microservices-based architecture and orchestrate their containerized applications in Kubernetes, distributed security controls become a must.

Achieving DevSecOps Requires Cutting Through the Jargon

Establishing a culture where security can work easily with developers starts with making sure they can at least speak the same language.

How Security Leaders at Starbucks and Microsoft Prepare for Breaches

Executives discuss the security incidents they're most worried about and the steps they take to prepare for them.

What Cybersecurity Pros Really Think About Artificial Intelligence

While there's a ton of unbounded optimism from vendor marketing and consultant types, practitioners are still reserving a lot of judgment.

EDITORS' CHOICE

8 Infosec Page-Turners for Days Spent Indoors

Stuck inside and looking for a new read? Check out these titles written by security practitioners and reporters across the industry.

COVID-19: Getting Ready for the Next Business Continuity Challenge

What comes after you've empowered your remote workforce in the wake of the coronavirus pandemic? Dealing with a large portion of that workforce getting sick at the same time.

NEW FROM THE EDGE

Three Ways Your BEC Defense Is Failing & How to Do Better

Business email compromises cost the economy billions of dollars. Experts have advice on how to stop them from hitting you for millions at a pop.

What Should I Do If Someone Is Impersonating My Company in a Phishing Campaign?

Two security awareness advocates from KnowBe4 provide some solid suggestions.

6 Emerging Cyber Threats That Enterprises Face in 2020