Dark Reading Daily -- January 22, 2021

Attackers Leave Stolen Credentials Searchable on Google

Operators behind a global phishing campaign inadvertently left thousands of stolen credentials accessible via Google Search.

DreamBus, FreakOut Botnets Pose New Threat to Linux Systems

Researchers from Zscaler and Check Point describe botnets as designed for DDoS attacks, cryptocurrency mining, and other malicious purposes.

Breach Data Shows Attackers Switched Gears in 2020

Attackers focused more on ransomware, while the consolidation of data into large databases led to fewer reported breaches but more records leaked.

7 Steps to Secure a WordPress Site

Many companies operate under the assumption that their WordPress sites are secure -- and that couldn't be anything further from the truth.

Cloud Jacking: The Bold New World of Enterprise Cybersecurity

Increased reliance on cloud computing puts more weight on robust authentication systems to protect data against hijackers.

Rethinking IoT Security: It's Not About the Devices

Keeping IoT safe in the future will require securing the networks themselves. Focusing on the devices is a never-ending battle that will only become more burdensome.

Microsoft Releases New Info on SolarWinds Attack Chain

Threat actors went to elaborate lengths to maintain operational security around second-stage payload activation, company says.

Vulnerabilities in Popular DNS Software Allow Poisoning

Seven flaws in DNSMasq have limited impact, but in combination they could be chained to create a multistaged attack.

4 Intriguing Email Attacks Detected by AI in 2020

Here's to the sneakiest of the sneaky. These clever phishing messages -- that standard validation measures often missed -- deserve proper dishonor. (Sponsored)

EDITORS' CHOICE

SolarWinds Attack Underscores 'New Dimension' in Cyber-Espionage Tactics

Meanwhile, Malwarebytes is the latest victim, Symantec discovers a fourth piece of malware used in the massive attack campaign, and FireEye Mandiant releases a free tool to help spot signs of the attack.

A Security Practitioner's Guide to Encrypted DNS

Best practices for a shifting visibility landscape.

LATEST FROM THE EDGE

Hacker Pig Latin: A Base64 Primer for Security Analysts

The Base64 encoding scheme is often used to hide the plaintext elements in the early stages of an attack that can't be concealed under the veil of encryption. Here's how to see through its tricks.

2020: The Year in Security