Dark Reading Daily -- June 30, 2020

The right decoys can frustrate attackers and help detect threats more quickly.

University of California SF Pays Ransom After Medical Servers Hit

As one of at least three universities hit in June, the school paid $1.14 million to cybercriminals following an attack on "several IT systems" in the UCSF School of Medicine.

Russian Cybercriminal Behind CardPlanet Sentenced to 9 Years

Aleksei Burkov will go to federal prison for operating two websites built to facilitate payment card fraud, hacking, and other crimes.

Tall Order for Small Businesses: 3 Tips to Find Tailored Security Solutions

SMBs are responsible for nearly 44% of US economic activity, but given the current climate, it can be difficult for them to find available and/or affordable resources.

HackerOne Reveals Top 10 Bug-Bounty Programs

Rankings based on total bounties paid, top single bounty paid, time to respond, and more.

Files Stolen from 945 Websites Discovered on Dark Web

Researchers who found the archived SQL files estimate up to 14 million people could be affected.

COVID-19: Latest Security News & Commentary

Check out Dark Reading's updated, exclusive news and commentary surrounding the coronavirus pandemic.

'GoldenSpy' Malware Hidden in Tax Software Spies on Companies Doing Business in China

Advanced persistent threat (APT) campaign aims to steal intelligence secrets from foreign companies operating in China.

Another Record-Breaking DDoS Attack Signals Shift in Criminal Methods

Malicious botnet sources explode in new attacks that push boundaries in terms of volume and duration.

Major US Companies Targeted in New Ransomware Campaign

Evil Corp. group hit at least 31 customers in campaign to deploy WastedLocker malware, according to Symantec.

EDITORS' CHOICE

Cloud Threats and Priorities as We Head Into the Second Half of 2020

With millions working from home and relying on the cloud, security leaders are under increasing pressure to keep their enterprises breach-free.

Contact Tracing & Threat Intel: Broken Tools & Processes

How epidemiology can solve the people problem in security.

NEW FROM THE EDGE

5 New InfoSec Job Training Trends: What We're Studying During COVID-19

With the pandemic uprooting networks and upending careers, which security skills are hot -- and which are not?

How Cybersecurity Incident Response Programs Work (and Why Some Don't)