Dark Reading Daily -- August 15, 2019

7 Biggest Cloud Security Blind Spots

Cloud computing boon is for innovation, yet security organizations find themselves running into obstacles.

Financial Phishing Grows in Volume and Sophistication in First Half of 2019

Criminals are using the tools intended to protect consumers to attack them through techniques that are becoming more successful with each passing month.

GitHub Named in Capital One Breach Lawsuit

A new lawsuit says that GitHub bears responsibility for the Capital One breach because it actively encourages hacking and stored stolen data.

Attackers Try to Evade Defenses with Smaller DDoS Floods, Probes

Cybercriminals are initiating more attacks using low-bandwidth techniques, but the tactics expand the gray area between DDoS attacks and popular methods of mass scanning.

BioStar 2 Leak Exposes 23GB Data, 1M Fingerprints

Thousands of organizations, including banks, governments, and the UK Metropolitan Police, use the biometric security tool to authenticate users.

Trend Micro Patches Privilege Escalation Bug in its Password Manager

Organizations should update to latest build as soon as possible, security vendor says.

Microsoft Patches Wormable RCE Vulns in Remote Desktop Services

Similar to the now-patched 'BlueKeep' vulnerability, two flaws fixed today could let malware spread across vulnerable computers.

Why Companies Fail to Learn from Peers' Mistakes (and How They Can Change)

Far too often, there's a new breach in the headlines. Companies need to start learning some obvious lessons.

Apple's New Bounty Program Has Huge Incentives, Big Risks

Industry observers applaud the program's ability to find exploits but fear unintended consequences.

EDITOR'S CHOICE

Stronger Defenses Force Cybercriminals to Rethink Strategy

Researchers see the rise of new relationships and attack techniques as criminals put companies' resilience to the test.

NEW FROM THE EDGE

5 Things to Know About Cyber Insurance

More businesses are recognizing the need for cyber insurance as part of an overall security strategy. Here are some key points to consider when evaluating, purchasing, and relying on a policy.

Kaspersky Research Finds Cloud Atlas APT Upgraded with Polymorphic Malware

McAfee to Acquire NanoSec to Enhance Capabilities in Cloud Security

NanoSec's multi-cloud, zero-trust application visibility and security platform further extend McAfee's cloud access security broker (CASB) and cloud workload protection platform (CWPP) capabilities.

ZeroFOX Expands AI Capabilities to Detect Deepfakes

New video analysis features analyze content and identify risks.

Capsule8 Adds Significant Funding from Intel Capital

Strategic investment to fuel expansion of Capsule8's go-to-market efforts.

MORE PRODUCTS & RELEASES

7 Threats & Disruptive Forces Changing the Face of Cybersecurity