Dark Reading Weekly -- November 05, 2020

6 Cybersecurity Lessons From 2020

The COVID-19 pandemic exposed new weaknesses in enterprise cybersecurity preparedness.

Disinformation Now the Top Concern Following Hack-Free Election Day

After an Election Day without foreign interference and cyberattacks, security experts turn their focus to disinformation.

Rising Ransomware Breaches Underscore Cybersecurity Failures

Ransomware's continued success speaks volumes about what's at stake for businesses and people, and, perhaps, the cybersecurity industry's inability to adapt quickly enough to protect everyone.

APT Groups Get Innovative -- and More Dangerous -- in Q3

In "curious" trend, more threat actors diversified their tool sets in the third quarter than usual.

JavaScript Obfuscation Moves to Phishing Emails

Attackers are hiding malicious payloads in phishing emails via a technique traditionally used to hide malicious code planted on websites.

How Healthcare Organizations Can Combat Ransomware

The days of healthcare organizations relying solely on endpoint security software to stop attacks are over. Here are six ways that healthcare providers can fight the ever-present threat.

Cybercrime: Nation-States Go Prime Time

Critical infrastructure remains a high-value target, but 90% of nation-states also attack other industry sectors.

Oracle Issues Out-of-Band Update for Remote-Access Vulnerability

The exploit could give an attacker complete control of vulnerable WebLogic servers.

6 Ways Passwords Fail Basic Security Tests

New data shows humans still struggle with password creation and management.

Securing the 2020 Election: 'We're Not Out of the Woods Yet'

Election Day brought instances of misinformation, robocalls, and technical glitches, but officials are more worried about coming days and weeks.

Ransomware Wave Targets US Hospitals: What We Know So Far

A joint advisory from the CISA, FBI, and HHS warns of an "increased and imminent" threat to US hospitals and healthcare providers.

EDITORS' CHOICE

Prepare for the Unexpected: Costs to Consider in Security Budgets

Organizations that update business models to include cybersecurity as part of a strategic planning process may be able to better withstand unexpected disruptions.

SANS Launches New CyberStart Program for All High School Students

Free program lets students solve real-world security problems - and learn about cybersecurity.

NEW FROM THE EDGE

9 Cyber Disaster-Recovery Planning Tips for a Disaster-Prone Time

This year has been the ultimate test of business resilience, and if anything is now clear, it's this: It's time for security pros to rewrite their playbooks in preparation for a more dangerous wave of attacks.

How to Measure and Reduce Cybersecurity Risk in Your Organization