Dark Reading Daily -- July 29, 2020

Out-of-Date and Unsupported Cloud Workloads Continue as a Common Weakness

More than 80% of companies have at least one Internet-facing cloud asset that is more than six months out of date or running software that is no longer supported, according to scan data.

Researchers Foil Phishing Attempt on Netflix Customers

Hackers use two stolen domains to steal credentials from Netflix users and then send them to the real Netflix site.

Lazarus Group Shifts Gears with Custom Ransomware

The North Korea-linked APT group has developed its own ransomware strain to better conduct financial theft, researchers report.

As Businesses Move to the Cloud, Cybercriminals Follow Close Behind

In the wake of COVID-19, data theft is by far the top tactic, followed by cryptomining and ransomware.

Autonomous IT: Less Reacting, More Securing

Keeping data secure requires a range of skills and perfect execution. AI makes that possible.

7.5M Banking Customers Affected in Dave Security Breach

The financial services app confirms user data was compromised in a data breach at its former third-party provider, WayDev.

Avon Server Leaks User Info and Administrative Data

An unprotected server has exposed more than 7GB of data from the beauty brand.

Cybersecurity Lessons from the Pandemic

How does cybersecurity support business and society? The pandemic shows us.

Twilio Security Incident Shows Danger of Misconfigured S3 Buckets

Twilio says attackers accessed its misconfigured cloud storage system and altered a copy of the JavaScriptSDK it shares with customers.

Email Security Features Fail to Prevent Phishable 'From' Addresses

The security features for verifying the source of an email header fail to work together properly in many implementations, according to a team of researchers.

EDITORS' CHOICE

7 Summer Travel Security Tips

With staying safe during the pandemic high priority, it's easy to let your guard down about the security of the devices you take along your travels.

Ripple20's Effects Will Impact IoT Cybersecurity for Years to Come

A series of newly discovered TCP/IP software vulnerabilities pose a threat to millions of IoT devices. Undiscovered since the early 1990s, they highlight the need to improve security in an increasingly precarious IoT supply chain.

LATEST FROM THE EDGE

Rise of the Robots: How You Should Secure RPA

Robotic Process Automation (RPA) is the next big thing in innovation and digital strategy. But what security details are overlooked in the rush to implement bots?

Special Report: Computing's New Normal, a Dark Reading Perspective