Dark Reading Weekly -- October 31, 2019

As Phishing Kits Evolve, Their Lifespans Shorten

Most phishing kits last less than 20 days, a sign defenders are keeping up in the race against cybercrime.

Microsoft Office Bug Remains Top Malware Delivery Vector

CVE-2017-11882 has been attackers' favorite malware delivery mechanism throughout the second and third quarters of 2019.

Old RAT, New Moves: Adwind Hides in Java Commands to Target Windows

The Adwind remote access Trojan conceals malicious activity in Java commands to slip past threat intelligence tools and steal user data.

Fortinet Bolsters Endpoint Security with enSilo Acquisition

As companies reduce their vendor count, consolidation will likely continue to accelerate in the next year.

Hacking Phones: How Law Enforcement Is Saving Privacy

It's no longer true that society must choose to either weaken everybody's privacy or let criminals run rampant.

5 Things the Hoodie & the Hard Hat Need to Know About Each Other

Traditionally, the worlds of IT (the hoodie) and OT (the hard hat) have been separate. That must change.

Who Made the List Of 2019's Nastiest Malware?

This year's compilation features well-known ransomware, botnet, and cryptomining software.

40% of Security Pros Job Hunting as Satisfaction Drops

Symptoms of job dissatisfaction creep into an industry already plagued with gaps in diversity and work-life balance.

The Real Reasons Why the C-Suite Isn't Complying with Security

Is the C-suite really that bad at following security policy? Or is it a case of mixed messages and misunderstanding?

Apple Boots 17 Trojan-Laden Apps From Mobile Store

Malware was designed to carry out click-fraud, Wandera says.

EDITORS' CHOICE

8 Trends in Vulnerability and Patch Management

Unpatched flaws continue to be a major security issue for many organizations.

Email Threats Poised to Haunt Security Pros into Next Decade

Decentralized threat intel sharing, more public-private collaboration, and greater use of automated incident response are what's needed to combat phishing

NEW FROM THE EDGE

Cybersecurity's 'Moral Imperative'

Cybersecurity professionals often talk about the economic drivers of security. But should the conversation shift to include a moral component? At least one analyst says "yes."

7 Threats & Disruptive Forces Changing the Face of Cybersecurity