Dark Reading Daily -- February 12, 2021

7 Things We Know So Far About the SolarWinds Attacks

Two months after the news first broke, many questions remain about the sophisticated cyber-espionage campaign.

Ransomware Attackers Set Their Sights on SaaS

Ransomware has begun to target data-heavy SaaS applications, open source, and Web and application frameworks.

Growing Collaboration Among Criminal Groups Heightens Ransomware Threat for Healthcare Sector

Expect increase in ransomware and 'triple extortion' attacks, Cyber Threat Intelligence League says.

Pandemic Initially Led to Fewer Disclosed Vulnerabilities, Data Suggests

Vulnerability disclosure started off slow but caught up by the end of the year, according to a new report.

Cloud-Native Apps Make Software Supply Chain Security More Important Than Ever

Cloud-native deployments tend to be small, interchangeable, and easier to protect, but their software supply chains require closer attention.

Game Over: Stopping DDoS Attacks Before They Start

Video games are poised for a revolution, but benefits will come to fruition only if the industry can guarantee consistent performance and availability.

Microsoft Launches Phase 2 Mitigation for Zerologon Flaw

The Netlogon remote code execution vulnerability, disclosed last August, has been weaponized by APT groups.

High-Severity Vulnerabilities Discovered in Multiple Embedded TCP/IP Stacks

Flaw leaves millions of IT, OT, and IoT devices vulnerable to attack.

SolarWinds Attack Reinforces Importance of Principle of Least Privilege

Taking stock of least-privilege policies will go a long way toward hardening an organization's overall security posture.

Microsoft Fixes Windows Zero-Day in Patch Tuesday Rollout

Microsoft's monthly security fixes addressed a Win32k zero-day, six publicly known flaws, and three bugs in the Windows TCP/IP stack.

EDITORS' CHOICE

Zero Trust in the Real World

Those who are committed to adopting the concept have the opportunity to make a larger business case for it across the organization, working with executive leaders to implement a zero-trust framework across the entire enterprise.

Cartoon Caption Winner: Insider Threat

And the winner of Dark Reading's January cartoon caption contest is ...

LATEST FROM THE EDGE

Unemployment Fraud: As If Being Out of Work Wasn't Bad Enough

With the pandemic as a backdrop, cybercriminals have recognized an unprecedented opportunity to steer billions of dollars in unemployment claims into the own accounts.

2021 Top Enterprise IT Trends