Dark Reading Daily -- May 13, 2020

Three Years After WannaCry, Ransomware Accelerating While Patching Still Problematic

Using a known exploit to infect unmaintained systems, the WannaCry ransomware worm remains a study in preventable catastrophes. Yet many companies continue to ignore its lessons.

Website Attacks Become Quieter & More Persistent

Threat actors have pivoted from noisy attacks to intrusions where stealth and ROI are primary goals, new report says.

Microsoft Fixes 111 Vulnerabilities for Patch Tuesday

This marks the third month in a row that Microsoft patched more than 100 bugs, of which 16 are classified as critical.

Nine in 10 Applications Contain Outdated Software Components

Almost every application uses open-source components and 91% use libraries that are out of date or that have been abandoned altogether.

Secure Contact Tracing Needs More Transparent Development

Experts worry that without proper planning, today's decisions about developing contact-tracing apps could have unforeseen consequences in the years to come.

Coronavirus, Data Privacy & the New Online Social Contract

How governments can protect personal privacy in contact tracing while saving peoples' lives

A-List Celebrity Law Firm Confirms Cyberattack

Attackers claim to steal 756GB of data from Grubman Shire Meiselas & Sacks, which includes Madonna and Lady Gaga among its clients.

DHS, FBI & DoD Report on New North Korean Malware

Three new reports detail malware coming out of the Hidden Cobra cyber operations in North Korea.

As Remote Work Becomes the Norm, Security Fight Moves to Cloud, Endpoints

A majority of firms expect to keep more employees working remotely post-pandemic, forcing businesses to undertake more comprehensive digital and cloud transformations.

Thunderbolt Vulnerabilities Could Threaten Millions of PCs

Attackers with physical access to targeted machines could exploit these flaws to access and copy data within minutes, researchers say.

Companies Struggle for Effective Cybersecurity

The money companies are spending on cybersecurity tools doesn't necessarily result in better security, a new survey shows.

EDITORS' CHOICE

6 Free Cybersecurity Training and Awareness Courses

Most are designed to help organizations address teleworking risks related to COVID-19 scams.

The Modern SOC Demands New Skills

Automation and other technologies are improving the organizational structure of the security operations center. This is ultimately for the better, but it means that roles will change too.

NEW FROM THE EDGE

Cyber Subterfuge and Curious Sharks Threaten the World's Subsea Fiber-Optic Cables

Malware, spies, and hackers, plus erosion and sharks, pose huge risks to the fiber optics that transmit almost all the world's data.

How Cybersecurity Incident Response Programs Work (and Why Some Don't)