Dark Reading Daily -- November 03, 2020

6 Cybersecurity Lessons From 2020

The COVID-19 pandemic exposed new weaknesses in enterprise cybersecurity preparedness.

New Tools Make North Korea's Kimsuky Group More Dangerous

Threat actor actively targeting US organizations in global intelligence-gathering campaign, government says.

California's Prop. 24 Splits Privacy Advocates

Critics worry that the curatives in Prop. 24 are worse than the disease of privacy-rights violations.

Microsoft & Others Catalog Threats to Machine Learning Systems

Thirteen organizations worked together to create a dictionary of techniques used to attack ML models and warn that such malicious efforts will become more common.

Fraud Prevention Strategies to Prepare for the Future

While companies have largely adjusted to the new normal for security management, here are some tips for combatting fraud, post-COVID.

(Sponsored Article) The Expanding Attack Surface: Don't Forget to Protect Your APIs

When you deploy a web application and expose APIs that access critical information to the Internet, you need a modern Web Application and API Protection (WAAP) solution that provides protection across your entire attack surface.

Russian National Sentenced to 8 Years in Prison for Role in Botnet Operation

Cybercrime scheme netted more than $100 million.

Windows Zero-Day Used with Chrome Flaw in Targeted Attacks

Google's Project Zero has disclosed a Windows kernel zero-day vulnerability being used with a known Chrome bug in targeted attacks.

6 Ways Passwords Fail Basic Security Tests

New data shows humans still struggle with password creation and management.

'Act of War' Clause Could Nix Cyber Insurance Payouts

The indictment of six members of the Russian military for the NotPetya ransomware attack places companies on notice that insurance "is not a get-out-of-jail-free card."

Breaking the Glass Ceiling: Tough for Women, Tougher for Women of Color

Security practitioners shed light on obstacles limiting career growth and the steps businesses can take to achieve their promises of a more diverse workforce.

EDITORS' CHOICE

As Businesses Go Remote, Hackers Find New Security Gaps

Improper access control, information disclosure, and SSRF are among the most impactful, and most awarded, security flaws found this year.

Physical Security Has a Lot of Catching Up to Do

The transformation we need: merging the network operations center with the physical security operations center.

NEW FROM THE EDGE

How Can I Help Remote Workers Secure Their Home Routers?

The most effective way is with employee security education.

How to Measure and Reduce Cybersecurity Risk in Your Organization