Dark Reading Daily -- July 23, 2019

Equifax to Pay Up to $700mn for Data Breach Damages

In a settlement with the FTC, consumers affected by the breach are eligible for up to $20,000 in a cash settlement, depending on damages they can prove.

CISO Pressures: Why the Role Stinks and How to Fix It

CISOs spend much less time in their role than other members of the boardroom. It's a serious problem that must be addressed.

6 Actions That Made GDPR Real in 2019

In the wake of recent fines levied against British Airways, Marriott, and Facebook, companies are starting to take data privacy and security more seriously.

How Cybercriminals Break into the Microsoft Cloud

Microsoft and Trimarc researchers explore the most common attacks against the cloud and effective defenses and mitigation.

Firmware Vulnerabilities Show Supply Chain Risks

A recently announced pair of vulnerabilities in server firmware could put enterprise IT at risk.

Ex-NSA Contractor Gets 9 Years for Retaining Defense Data

Law enforcement recovered two decades' worth of stolen material from the home and car of former government contractor Harold Martin.

The 10 Essentials of Infosec Forensics

Whether it's your first investigation or 500th, review the basics of IT forensics to streamline and simplify your discovery.

MITRE ATT&CK Framework Not Just for the Big Guys

At Black Hat, analysts from MITRE and Splunk will detail how organizations of many different sizes are leveraging ATT&CK's common language.

'Human Side-Channels': Behavioral Traces We Leave Behind

How writing patterns, online activities, and other unintentional identifiers can be used in cyber offense and defense.

EDITORS' CHOICE

8 Legit Tools and Utilities That Cybercriminals Commonly Misuse

Threat actors are increasingly 'living off the land,' using publicly available management and administration tools to conceal malicious activity.

NEW FROM THE EDGE

Planning a Bug Bounty Program? Follow Shopify's Example

Four years, $1 million in payouts, and the identification of 950 bugs later, Shopify provides an excellent example for organizations looking to launch their own programs.

Building and Managing an IT Security Operations Program