Dark Reading Daily -- June 26, 2020

Another Record-Breaking DDoS Attack Signals Shift in Criminal Methods

Malicious botnet sources explode in new attacks that push boundaries in terms of volume and duration.

The right decoys can frustrate attackers and help detect threats more quickly.

Criminals Turn to IM Platforms to Avoid Law Enforcement Scrutiny

Researchers from IntSights observed a sharp increase in the use of popular instant messaging apps over the past year among threat groups.

Lucifer Malware Aims to Become Broad Platform for Attacks

The recent spread of the distributed denial-of-service tool attempts to exploit a dozen web-framework flaws, uses credential stuffing, and is intended to work against a variety of operating systems.

Vulnerabilities Declining in Open Source, But Slow Patching Still a Problem

Even as more code is produced, indirect dependencies continue to undermine security.

Contact Tracing & Threat Intel: Broken Tools & Processes

How epidemiology can solve the people problem in security.

Better Collaboration Between Security & Development

Security and development teams must make it clear why their segment of the development life cycle is relevant to the other teams in the pipeline.

'GoldenSpy' Malware Hidden in Tax Software Spies on Companies Doing Business in China

Advanced persistent threat (APT) campaign aims to steal intelligence secrets from foreign companies operating in China.

Long-Term Effects of COVID-19 on the Cybersecurity Industry

The maelstrom of change we're going through presents a unique opportunity to become enablers. And to do that requires flexibility.

What Will Cybersecurity's 'New Normal' Look Like?

The coronavirus pandemic has forced changes for much of the business world, cybersecurity included. What can we expect going forward?

EDITORS' CHOICE

10 Tips for Maintaining Information Security During Layoffs

Insider cyberthreats are always an issue during layoffs -- but with record numbers of home-office workers heading for the unemployment line, it has never been harder to maintain cybersecurity during offboarding.

Black Hat Survey: Breach Concerns Hit Record Levels Due to COVID-19

Annual "Black Hat USA Attendee Survey" indicates unprecedented concern over possible compromises of enterprise networks and US critical infrastructure.

NEW FROM THE EDGE

How to Wring Every Last Drop Out of Your Security Budget

In the face of tighter budgets and lowered spending forecasts due to the pandemic, optimizing and improving the efficiency of security programs -- without sacrificing integrity -- has never been more important.

How Cybersecurity Incident Response Programs Work (and Why Some Don't)