Dark Reading Daily -- February 23, 2021

8 Ways Ransomware Operators Target Your Network

Security researchers explore how criminals are expanding their arsenals with new, more subtle, and more effective ransomware attack techniques.

Accellion Data Breach Resulted in Extortion Attempts Against Multiple Victims

FireEye Mandiant says it discovered data stolen via flaw in Accellion FTA had landed on a Dark Web site associated with a known Russia-based threat group.

Chinese-Affiliated APT31 Cloned & Used NSA Hacking Tool

APT31 cloned and reused a Windows-based hacking tool for years before Microsoft patched the vulnerability, researchers report.

Cybercrime Groups More Prolific, Focus on Healthcare in 2020

Almost four of every five attacks attributed in 2020 were conducted by cybercriminal groups, a significant jump from 2019, with attacks on healthcare or using the pandemic rising fast.

What Can Your Connected Car Reveal About You?

App developers must take responsibility for the security of users' data.

Cybersecurity Responsibility in a Post-Pandemic World

In this video, Omdia Cybersecurity Senior Research Director Maxine Holt explains why a more sustainable approach to post-pandemic cybersecurity is necessary.

Sequoia Capital Suffers Data Breach

The attack began with a successful phishing email.

Researcher Reports Vulnerability in Apple iCloud Domain

A stored cross-site scripting vulnerability in the iCloud website reportedly earned a security researcher $5,000.

Attackers Already Targeting Apple's M1 Chip with Custom Malware

A proof-of-concept program infects systems with ARM64-compiled binaries and then reaches out to download additional functionality.

Hiding in Plain Sight: What the SolarWinds Attack Revealed About Efficacy

Multilayered infiltration involved custom malicious tooling, backdoors, and cloaked code, far beyond the skills of script kiddies.

Egregor Arrests a Blow, but Ransomware Will Likely Bounce Back

Similar to previous ransomware takedowns, this disruption to the ransomware-as-a-service model will likely be short-lived, security experts say.

EDITORS' CHOICE

How to Run a Successful Penetration Test

These seven tips will help ensure a penetration test improves your organization's overall security posture.

Data Security Accountability in an Age of Regular Breaches

As the number of vendors impacted by supply chain breaches grows, one constant question remains: Where exactly does accountability for data security lie, and what part do end users play in their own data breach protection?

LATEST FROM THE EDGE

Breach Etiquette: How to Mind Your Manners When It Matters

Panic-stricken as you may be in the face of a cyberattack, keeping calm and, perhaps most importantly, responding appropriately are critical to limiting the damage.

2021 Top Enterprise IT Trends