Dark Reading Daily -- July 07, 2020

BEC Busts Take Down Multimillion-Dollar Operations

The two extraditions of business email compromise attackers indicate a step forward for international law enforcement collaboration.

North Korea's Lazarus Group Diversifies Into Card Skimming

Since at least May 2019, the state-sponsored threat actor has stolen card data from dozens of retailers, including major US firms.

Attackers Scan for Vulnerable BIG-IP Devices After Flaw Disclosure

The US Cybersecurity and Infrastructure Security Agency encourages organizations to patch a critical flaw in the BIG-IP family of application delivery controllers, as firms find evidence that attackers are scanning for the critical vulnerability.

How to Assess More Sophisticated IoT Threats

Securing the Internet of Things requires diligence in secure development and hardware design throughout the product life cycle, as well as resilience testing and system component analysis.

Android Adware Tied to Undeletable Malware

Adware on inexpensive Android smartphone can carry additional malware and be undeletable.

Credit-Card Skimmer Seeks Websites Running Microsoft's ASP.NET

The payment-card skimmer targets websites hosted on Microsoft IIS servers and running the ASP.NET web framework.

COVID-19: Latest Security News & Commentary

Check out Dark Reading's updated, exclusive news and commentary surrounding the coronavirus pandemic.

What's Anonymous Up to Now?

The hacker group recently took credit for two high-profile incidents -- but its actions aren't quite the same as they once were, some say.

Anatomy of a Long-Con Phish

A fraudster on LinkedIn used my online profile in an apparent attempt to pull off a wide-ranging scam business venture.

Attackers Compromised Dozens of News Websites as Part of Ransomware Campaign

Malware used to download WastedLocker on target networks was hosted on legit websites belonging to one parent company, Symantec says.

EDITORS' CHOICE

7 IoT Tips for Home Users

Whether for business or pleasure, you're on your own once you walk into the house with a new Internet of Things device. Here's how to keep everyone secure.

Another COVID-19 Side Effect: Rising Nation-State Cyber Activity

While financial institutions and government remain popular targets, COVID-19 research organizations are now also in the crosshairs.

NEW FROM THE EDGE

Cybersecurity's Lament: There Are No Cooks in Space

Cybersecurity staff are on edge for the same reason that there are no cooks on the ISS: Organizations are carefully watching expenses for jobs that don't require dedicated team members.

How Cybersecurity Incident Response Programs Work (and Why Some Don't)