Dark Reading Daily -- March 15, 2018

77% of Businesses Lack Proper Incident Response Plans

New research shows security leaders have false confidence in their ability to respond to security incidents.

New Hosted Service Lowers Barriers to Malware Distribution

BlackTDS is a traffic distribution service for directing users to malware and exploit kits based on specific parameters.

Segmentation: The Neglected (Yet Essential) Control

Failure to deploy measures to contain unauthorized intruders is a recipe for digital disaster.

A Secure Enterprise Starts with a Cyber-Aware Staff

An attack doesn't have to be super high-tech to cause a lot of damage. Make sure your employees know how to spot an old-fashioned phishing campaign.

SEC Charges Former Equifax Exec with Insider Trading

CIO of a US business unit within Equifax had reportedly learned of the company's data breach and sold his shares for nearly $1 million.

Electric Utility Hit with Record Fine for Vulnerabilities

An unnamed power company has consented to a record fine for leaving critical records exposed.

Chinese APT Backdoor Found in CCleaner Supply Chain Attack

Avast discovers ShadowPad tool for use in apparent planned third stage of the targeted attack campaign.

Microsoft Remote Access Protocol Flaw Affects All Windows Machines

Attackers can exploit newly discovered critical crypto bug in CredSSP via a man-in-the-middle attack and then move laterally within a victim network.

Google 'Distrust Dates' Are Coming Fast

All the tools are in place for the migration of SSL digital certificates on a scale that is unprecedented for the certificate authority industry. Are you ready?

EDITORS' CHOICE

What CISOs Should Know About Quantum Computing

As quantum computing approaches real-world viability, it also poses a huge threat to today's encryption measures.

New 'Mac-A-Mal' Tool Automates Mac Malware Hunting & Analysis

Researchers at Black Hat Asia will demonstrate a new framework they created for catching and studying Apple MacOS malware.

How to Cope with the IT Security Skills Shortage