Dark Reading Daily -- July 28, 2022

Average Data Breach Costs Soar to $4.4M in 2022

Call it a "cyber tax": Those costs are usually passed on to consumers, not investors, as compromised businesses raise prices for goods and services.

Multiple Windows, Adobe Zero-Days Anchor Knotweed Commercial Spyware

Microsoft flagged the company's Subzero tool set as on offer to unscrupulous governments and shady business interests.

US Offers $10M Double-Reward for North Korea Cyberattacker Info

North Korean state-sponsored actors, who help economically prop up Kim Jong Un's dictatorship, continue to pummel US infrastructure.

The Great BizApp Hack: Cyber-Risks in Your Everyday Business Applications

IT admins can lock some of the obvious open doors in business applications, but system visibility is key. Build automatic monitoring defenses and adopt a Git-like tool so you can "version" your business apps to restore prior states.

Is Your Home or Small Business Built on Secure Foundations? Think Again…

Did you know that the standard router relied upon in homes and by thousands of small businesses is the most frequently attacked IoT device? James Willison, Project and Engagement Manager, IoT Security Foundation, explores the issue and reveals an ongoing initiative from the foundation that is designed to better secure the devices.

Discord, Telegram Services Hijacked to Launch Array of Cyberattacks

Attackers are easily turning popular messaging apps and their associated services — like bots, cloud infrastructure, and CDNs — against users, researchers warn.

The Beautiful Lies of Machine Learning in Security

Machine learning should be considered an extension of — not a replacement for — existing security methods, systems, and teams.

Mysterious, Cloud-Enabled macOS Spyware Blows Onto the Scene

The CloudMensis spyware, which can lift reams of sensitive information from Apple machines, is the first Mac malware observed to exclusively rely on cloud storage for C2 activities.

8 Hot Summer Fiction Reads for Cybersecurity Pros

A reading list of recommended novels curated by cybersecurity experts for cybersecurity experts.

LATEST FROM THE EDGE

Overcoming the Fail-to-Challenge Vulnerability With a Friendly Face

Ahead of their Black Hat USA talk in August, Simon Pavitt and Stephen Dewsnip explain the value of helping people practice cyber defense via a "malicious floorwalker" exercise.

LATEST FROM DR TECHNOLOGY

When Human Security Meets PerimeterX

Dark Reading's analysis suggests that the merger between Human Security and PerimeterX will bring modern defense strategies to disrupt cybercrime and fraud.

Implementing Zero Trust In Your Enterprise: How to Get Started