Dark Reading Weekly -- August 27, 2020

6 Signs Your Supply Chain Risk Just Shot Up

Risk levels are not steady states. Here are six indications that the danger posed by your supply chain is headed in the wrong direction.

Phishing Attack Used Box to Land in Victim Inboxes

A phishing attack targeting government and security organizations used a legitimate Box page with Microsoft 365 branding to trick victims.

Higher Education CISOs Share COVID-19 Response Stories

Security leaders from Stanford, Ohio State, and the University of Chicago share challenges and response tactics from the COVID-19 pandemic.

Attackers Use Unicode & HTML to Bypass Email Security Tools

Researchers spot cybercriminals using new techniques to help malicious phishing emails slip past detection tools.

74 Days From the Presidential Election, Security Worries Mount

With pandemic measures continuing and political divisions deepening, security experts express concern about the security and integrity of the November election.

The 'Shared Responsibility' Misnomer: Why the Cloud Continues to Confound

Under the "shared responsibility model," the security management of cloud offerings is split equally between the vendor and the customer. Easy enough, right?

The Fatal Flaw in Data Security

Simply stated: No matter how sophisticated your security software is, data cannot be simultaneously used and secured. But that may be changing soon.

COVID-19: Latest Security News & Commentary

Check out Dark Reading's updated, exclusive news and commentary surrounding the coronavirus pandemic.

Cryptominer Found Embedded in AWS Community AMI

Researchers advise Amazon Web Services users running Community Amazon Machine Images to verify them for potentially malicious code.

MITRE Releases 'Shield' Active Defense Framework

Free knowledge base offers techniques and tactics for engaging with and better defending against network intruders.

MFA Mistakes: 6 Ways to Screw Up Multifactor Authentication

Fearful of messing up its implementation, many enterprises are still holding out on MFA. Here's what they need to know.

EDITORS' CHOICE

Dark Reading Launches New Section on Physical Security

Partnership with IFSEC enables Dark Reading to cover new areas of security and expand its audience.

New Cybersecurity Code of Practice for Installers Unveiled by BSIA

The British Security Industry Association's (BSIA) cybersecurity group has released a new code of practice for installers responsible for safety and security systems.

NEW FROM THE EDGE

Election Security's Sticky Problem: Attackers Who Don't Attack Votes

If election defenders are protecting votes, and adversaries are attacking something else entirely, both sides might claim success, "Operation BlackOut" simulation shows.

7 New Cybersecurity Vulnerabilities That Could Put Your Enterprise at Risk