Dark Reading Weekly -- February 03, 2022

8 Security Dinosaurs and What Filled Their Footprints

Security technology has to evolve as new threats emerge and defenses improve. Here is a look back at the old breeds that are dying out.

More Security Flaws Found in Apple's OS Technologies

Apple's latest updates included fixes for two zero-day flaws, several code execution bugs, and vulnerabilities that allowed attackers to bypass its core security protections.

Disclosure, Panic, Patch: Can We Do Better?

Companies struggle to understand the extent to which they are affected by vulnerabilities in open source software, but security specialists and maintainers are striving to secure the ecosystem.

The Zero-Trust Timer Is on for Federal Agencies — How Ready Are They?

A new study coincides with OMB’s finalization of its zero-trust strategy through 2024.

Why Security Pros Are Frustrated With Cloud Security

As companies shift more operations to the cloud, a shortfall in security talent and too much security data wastes more than half of the time spent on security issues, a survey finds.

Log4j Proved Public Disclosure Still Helps Attackers

Disclosure also puts organizations in the awkward position of trying to mitigate a vulnerability without something like a vendor patch to do the job.

Crypto Agility: Solving for the Inevitable

The advent of viable quantum computers will threaten today’s encryption standards, which are the basis of Internet security. Cryptographic agility is the key to post-quantum computing security, although implementing it will be a formidable challenge.

The Real-World Impact of the Global Cybersecurity Workforce Gap on Cyber Defenders

The effect is nuanced — and fundamental to cyber defense for organizations and nations.

7 Privacy Tips for Security Pros

How best to integrate privacy into your organization's security program.

Critical Log4j Vulnerabilities Are the Ultimate Gift for Cybercriminals

It's important to assume you have been vulnerable for months if not years, and to plan — and patch — accordingly.

Complexity vs. Capability: How to Bridge the Security Effectiveness Gap

Consolidation and automation are among the strategies for balancing security complexity and capability.

EDITORS' CHOICE

Phishing Simulation Study Shows Why These Attacks Remain Pervasive

Email purportedly from human resources convinced more than one-fifth of recipients to click, the majority of whom did so within an hour of receiving the fraudulent message.

LATEST FROM THE EDGE

The Looming CISO Mental Health Crisis — and What to Do About It, Part 1

The next big threat to corporate security may not be a new strain of malware or innovative attacker tactics, techniques, and processes. It may be our own mental health.

LATEST FROM DR TECHNOLOGY

Security Service Edge Boosters Form New Forum to Encourage Adoption

IT leaders who formed the SSE Forum say the technology offers cloud-forward security for modern workplaces.

How Enterprises Are Assessing Cybersecurity Risk in Today's Environment