Dark Reading Daily -- December 15, 2021

Attackers Target Log4J to Drop Ransomware, Web Shells, Backdoors

Amid the increase in Log4J attack activity, at least one Iranian state-backed threat group is preparing to target the vulnerability, experts say.

Microsoft Patches Zero-Day Spreading Emotet Malware

The December rollout includes 67 security patches and addresses one zero-day and five more publicly known vulnerabilities.

Tool Overload & Attack Surface Expansion Plague SOCs

Security professionals are burning out from handling too many tools and facing a growing number of threats, and more than 40% see lack of leadership as the main problem.

Combat Misinformation by Getting Back to Security Basics

One volley of fake news may land, but properly trained AI can shut down similar attempts at their sources.

Source Code Leaks: The Real Problem Nobody Is Paying Attention To

Source code is a corporate asset like any other, which makes it an attractive target for hackers.

(Sponsored Article) 5 Ways GRC & Security Can Partner to Reduce Insider Risk

In 2022, data governance, risk, and compliance (GRC) and security need to partner to implement a modern approach to data protection: insider risk management.

Propane Gas Distributor Hit With Ransomware

North America-based Superior Plus "temporarily disabled" some of its systems in the wake of the attack.

Ransomware Hits Virginia Legislative Agencies

The attack forced a shutdown of computer systems and websites for Virginia legislative agencies and commissions, reports state.

Name That Toon: Modern-Day Frosty

Feeling creative? Submit your caption and our panel of experts will reward the winner with a $25 Amazon gift card.

Why the Private Sector Is Key to Stopping Russian Hacking Group APT29

Left unchecked, these attacks could have devastating effects on government and military secrets and jeopardize the software supply chain and the global economy.

10 Stocking Stuffers for Security Geeks

Check out our list of gifts with a big impact for hackers and other techie security professionals.

MORE ON LOG4J

40% of Corporate Networks Targeted by Attackers Seeking to Exploit Log4j

More than 60 variants of the original exploit were introduced over the last day alone.

How Do I Find My Servers With the Log4j Vulnerability?

This Tech Tip outlines how enterprises can use Canarytokens to find servers in their organization vulnerable to CVE-2021-44228.

What to Do While Waiting for the Log4J Updates

This Tech Tip outlines how enterprise defenders can mitigate the risks of the Log4j vulnerabilities for the short-term while waiting for updates.

LATEST FROM THE EDGE

Cisco's Ash Devata on Securing the Hybrid Workforce With Zero Trust

Hybrid work is here to stay, and organizations can apply zero trust's three core principles to ensure a secure workforce, Devata says.

LATEST FROM DR TECH

Why Classifying Ransomware as a National Security Threat Matters

Government actions help starve attack groups of the resources - money, ability to recruit, and time.

How Data Breaches Affect the Enterprise