Dark Reading Daily -- April 05, 2022

Beware of These 5 Tax Scams

Fraudsters are out in full force as Tax Day approaches. Use this list to keep your company’s employees informed on what to watch out for this year.

Millions of Installations Potentially Vulnerable to Spring Framework Flaw

Internet scan indicates hundreds of thousands of vulnerable installations, while data from the major Java repository suggests millions, firms say.

State Department Announces Bureau of Cyberspace and Digital Policy

The newly created bureau will help shape norms of responsible government behavior in cyberspace and help US allies bolster their own cybersecurity programs.

Cybersecurity Mesh: IT's Answer to Cloud Security

With a properly functioning cybersecurity mesh architecture, one can guarantee safe, authorized access to data from any access point.

(Sponsored Article) Ransomware: Should Companies Ever Pay Up?

Ransomware is a major threat, and no business is "too small to target." So what should you do after an attack? Is negotiating with criminals ever the answer?

Apple Gift Card Scammers Sentenced for Role in $1.5M Fraud

Criminal conspiracy included theft of Apple point-of-sale devices.

Nation-State Hackers Ramp Up Ukraine War-Themed Attacks

Among them is the operator of the Ghostwriter misinformation campaign, with a new browser-in-browser phishing technique, according to Google's research team.

More Than Ever, Security Matters

Public policy proposals must consider technical, practical, and real-world security effects, and make sure we avoid unintended consequences.

Name That Toon: Sleep Like a Baby

Feeling creative? Submit your caption and our panel of experts will reward the winner with a $25 Amazon gift card.

EDITORS' CHOICE

Apple's Zero-Day Woes Continue

Two new bugs in macOS and iOS disclosed this week add to the growing list of zero-days the company has rushed to patch over the past year.

LATEST FROM THE EDGE

How Do I Decide Whether to Buy or Build in Security?

To build or buy — that is the question. Security teams have to consider maintenance costs and compliance questions when they go down the build-it-yourself path.

LATEST FROM DR TECHNOLOGY

A Comprehensive Backup Strategy Includes SaaS Data, Source Code

Backups aren't just limited to hard drives, databases and servers. This Tech Tip describes how organizations should expand their backup strategies.

Understanding DNS Threats and How to Use DNS to Expand Your Cybersecurity Arsenal