Dark Reading Weekly -- March 25, 2021

Follow Dark Reading:

March 25, 2021

LATEST SECURITY NEWS & COMMENTARY

6 Tips for Limiting Damage from Third-Party Attacks

The ability to protect your organization from third-party attacks will become increasingly critical as attackers try to maximize the effectiveness of their malicious campaigns.

Researchers Discover Two Dozen Malicious Chrome Extensions

Extensions are being used to serve up unwanted adds, steal data, and divert users to malicious sites, Cato Networks says.

Inside the Web Shell Used in the Microsoft Exchange Server Attacks

The history and details of China Chopper - a Web shell commonly seen in the widespread Microsoft Exchange Server attacks.

Verkada Attacker Charged With Wire Fraud, Conspiracy in US

Swiss national Till Kottmann and co-conspirators are accused of breaking into dozens of US companies and government entities.

Ransomware Incidents Continue to Dominate Threat Landscape

Cisco Talos' IR engagements found attackers relied heavily on malware like Zloader and BazarLoader to distribute ransomware in the past three months.

New Malware Hidden in Apple IDE Targets macOS Developers

XcodeSpy is latest example of growing attacks on software supply chain.

How Personally Identifiable Information Can Put Your Company at Risk

By being more mindful of how and where they share PII, employees will deprive cybercriminals of their most useful tool.

Top 3 Cybersecurity Lessons Learned From the Pandemic

Defending an enterprise of fully remote employees and their devices at this scale and speed had never been done before. Now, we do it every day.

What a Federal Data Privacy Law Would Mean for Consumers

With an array of serious proposals from both sides of the political divide, it looks as though the US may finally have a national privacy law.

Acer Reportedly Hit With $50M Ransomware Attack

Reports say a ransomware gang has given Acer until March 28 to pay, or it will double the ransom amount.

Disgruntled IT Contractor Sentenced in Retaliatory Office 365 Attack

Former contractor deleted 1,200 user accounts in revenge.

MORE NEWS & COMMENTARY


HOT TOPICS
RDP Attacks Persist Near Record Levels in 2021 A wave of attacks targeting Remote Desktop Protocol has continued throughout the pandemic as more employees continue to work from home. What CISOs Can Learn From Big Breaches: Focus on the Root Causes Address these six technical root causes of breaches in order to keep your company safer. 7 Tips to Secure the Enterprise Against Tax Scams Tax season is yet another opportunity for fraudsters to target your company. Here's how to keep everyone in the organization on their toes. MORE

EDITORS' CHOICE

How to Protect Our Critical Infrastructure From Attack

Just how worried should we be about a cyber or physical attack on national infrastructure? Chris Price reports on how the pandemic, the growth of remote working, and IoT are putting assets at risk.

Prioritizing Application & API Security After the COVID Cloud Rush

As companies hit the gas to accommodate the rapid shift to work-from-home, security fell behind. Now, it's time to close those gaps.

LATEST FROM THE EDGE

3 Classes of Account Fraud That Can Cost Your Company Big Time

Understanding each one can go a long way toward demystifying the topic as a whole - and combatting the threat.

Tech Resources

ACCESS TECH LIBRARY NOW

Understanding XDR - April 8 FREE Webinar
In this webinar, experts discuss the benefits and limitations of EDR, and offer recommendations on how to extend these capabilities to other parts of the IT infrastructure in order to improve overall security.
Detecting & Mitigating Attacks on Remote Workers
In this webinar, experts discuss some of the cyber attacks that have been made on work-from-home end users, as well as exploits against remote systems and devices.

FEATURED REPORTS

CURRENT ISSUE

2021 Top Enterprise IT Trends
DOWNLOAD THIS ISSUE	SUBSCRIBE NOW
BACK ISSUES \| MUST READS \| TECH DIGEST

PRODUCTS & RELEASES

AdaptiveMobile Security Details Major Security Flaw in 5G Core Network Slicing Design

Steel Root Partners With Zscaler

Gartner Identifies Top Security and Risk Management Trends for 2021

Cylera Announces $17 Million in Total Funding

Medigate Partners with Rapid7 to Protect Healthcare IoT Devices

 LogMeIn Appoints New CISO

MORE PRODUCTS & RELEASES

Dark Reading Weekly
-- Published By Dark Reading
Informa Tech
303 Second St., Suite 900 South Tower, San Francisco, CA 94107

To update your profile, change your e-mail address, or unsubscribe, click here.

To opt-out of any future Dark Reading Weekly Newsletter emails, please respond here.

Thoughts about this newsletter? Give us feedback.

Keep This Newsletter Out Of Your SPAM Folder
Don't let future editions go missing. Take a moment to add the newsletter's address to your anti-spam white list:

If you're not sure how to do that, ask your administrator or ISP. Or check your anti-spam utility's documentation.

We take your privacy very seriously. Please review our Privacy Statement.