Dark Reading Weekly -- March 03, 2022

7 Steps to Take Right Now to Prepare for Cyberattacks by Russia

A lot of the recommended preparation involves measures organizations should have in place already.

Companies' Code Leaking More Passwords and Secrets

Software code pushed to online code repositories exposed twice as many secrets compared to last year, putting organizations' security at risk.

Cyberattacks in Ukraine Soon Could Spill Over to Other Countries

Email-borne attacks out of Russia have already targeted at least a few US and European organizations.

Phishing Attack in Ukraine Could be Prelude to Disinformation Campaign

Ukraine military personnel being targeted with mass phishing emails, country's CERT warns.

Fears Rise of Potential Russian Cyberattacks on US, Allies Over Sanctions

If past is precedent, the cyber impact of the war in Ukraine could be broad and bruising, experts say.

3 Ways to Expand Gender Diversity in Cybersecurity

Why this is important: A business that surrounds itself with the same kind of people who work on the same projects will not generate new or original ideas.

Beyond the Hype: AI's Future in Defensive Cybersecurity

Hybridizing signatures with artificial intelligence is making a significant difference in our ability to detect cyberattacks, including ransomware.

The Future of Cyber Insurance

Having cyber insurance is a good idea if the costs make sense — it could be the difference between going out of business and staying afloat. But it shouldn't be your first course of action.

How to Boost Shift-Left Security in the SDLC

Organizations will see big wins from applying security controls early in the development life cycle.

Researchers Warn of Stealthy Chinese Backdoor Targeting Multiple Foreign Agencies

A stealthy backdoor program used by China-linked threat actors has targeted government computers at multiple foreign agencies, allowing attackers to retain a presence on sensitive networks and exfiltrate data while remaining undetected.

SaaS in the Enterprise: The Good, the Bad, and the Unknown

SaaS offers many benefits to the enterprise, but security issues left unchecked can mitigate value.

Reduce Risk With Better Cyber Due Diligence

Done incorrectly, due diligence can result in slower integration of assets, which increases acquisition costs associated and could reduce expected gains.

EDITORS' CHOICE

7 Ways to Secure Collaboration Tools in Your Organization

The push to embrace Slack, Teams, and Zoom at work comes with new security risks for organizations.

LATEST FROM THE EDGE

CISO Checklist for Offboarding Security Staff

The Great Resignation strikes cybersecurity teams, too. Here's a checklist for CISOs to ensure security is retained even when security staff is not.

LATEST FROM DR TECHNOLOGY

Insider Threats Are More Than Just Malicious Employees

Humans are unpredictable and may make mistakes that could result in a security incident.

How Enterprises Plan to Address Endpoint Security Threats in a Post-Pandemic World