Dark Reading Daily -- August 14, 2019

Apple's New Bounty Program Has Huge Incentives, Big Risks

Industry observers applaud the program's ability to find exploits but fear unintended consequences.

Microsoft Patches Wormable RCE Vulns in Remote Desktop Services

Similar to the now-patched 'BlueKeep' vulnerability, two flaws fixed today could let malware spread across vulnerable computers.

The California Consumer Privacy Act's Hidden Surprise Has Big Legal Consequences

The CCPA's provision devoted to 'reasonable' cybersecurity procedures and policies could trip up your business. Get ready now.

History Doesn't Repeat Itself in Cyberspace

The 10th anniversary of the US Cyber Command is an opportunity to prepare for unknowns in the rapidly changing cybersecurity landscape.

Internet Routing Security Initiative Launches Online 'Observatory'

Mutually Agreed Norms for Routing Security (MANRS) lets network operators and the public view online router incidents worldwide.

700K Guest Records Stolen in Choice Hotels Breach

Cybercriminals reportedly stole the information from an exposed MongoDB database on a third-party server.

Barracuda Buys Bot-Battling Tech from InfiSecure

The intellectual property acquired will add to Barracuda's bot-detection capabilities.

Significant Vulnerabilities Found in 6 Common Printer Brands

In a half-year project, two researchers tested six of the top enterprise printer brands and found vulnerabilities in every device, some of which allow remote execution.

New Vulnerability Risk Model Promises More-Efficient Security

Taking into account more factors than the current CVSS makes for a better assessment of actual danger.

Boeing 787 On-Board Network Vulnerable to Remote Hacking, Researcher Says

Boeing disputes IOActive findings ahead of security firm's Black Hat USA presentation.

EDITORS' CHOICE

2019 Pwnie Award Winners (And Those Who Wish They Weren't)

This year's round-up includes awards into two new categories: most under-hyped research and epic achievement.

NEW FROM THE EDGE

You Gotta Reach 'Em to Teach 'Em

As threats continue to evolve and cybercriminals become more sophisticated, organizations that lack a mature security awareness and training program place themselves at serious risk.

7 Threats & Disruptive Forces Changing the Face of Cybersecurity