Dark Reading Weekly -- September 05, 2019

Android Phone Flaw Allows Attackers to Divert Email

Researchers find that a spoofing a service message from the phone carrier is simple and effective on some brands of Android smartphones.

Rising Fines Will Push Breach Costs Much Higher

The cost of breaches will rise by two-thirds over the next five years, exceeding an estimated $5 trillion in 2024, primarily driven by higher fines as more jurisdictions punish companies for lax security.

Over 47K Supermicro Corporate Servers Vulnerable to Attack

Vulnerabilities in a remote-monitoring component give attackers a way to mount virtual USBs on systems, Eclypsium warns.

Bug Bounties Continue to Rise, but Market Has Its Own 1% Problem

The average payout for a critical vulnerability has almost reached $3,400, but only the top bug hunters of a field of 500,000 are truly profiting.

An Inside Look at How CISOs Prioritize Budgets & Evaluate Vendors

In-depth interviews with four market-leading CISOs reveal how they prioritize budgets, measure ROI on security investments, and evaluate new vendors.

Privacy 2019: We're Not Ready

To facilitate the innovative use of data and unlock the benefits of new technologies, we need privacy not just in the books but also on the ground.

Google Uncovers Massive iPhone Attack Campaign

A group of hacked websites has been silently compromising fully patched iPhones for at least two years, Project Zero reports.

'It Takes Restraint': A Seasoned CISO's Sage Advice for New CISOs

Todd Fitzgerald wrote the books on being a chief information security officer. Here he offers tips on what to do and what not to do in the first few months of a new CISO job.

3 Promising Technologies Making an Impact on Cybersecurity

The common thread: Each acts as a force multiplier, adding value to every other security technology around it.

EDITORS' CHOICE

7 Steps to Web App Security

Emerging technologies are introducing entirely new ways to reach, act, and interact with people. That makes app security more important than ever.

NEW FROM THE EDGE

Meet FPGA: The Tiny, Powerful, Hackable Bit of Silicon at the Heart of IoT

Field-programmable gate arrays are flexible, agile-friendly components that populate many infrastructure and IoT devices - and have recently become the targets of researchers finding vulnerabilities.

7 Threats & Disruptive Forces Changing the Face of Cybersecurity