Dark Reading Daily -- February 25, 2021

Botnet Uses Blockchain to Obfuscate Backup Command & Control Information

The tactic makes it much harder for defenders to take down botnets via sinkholing and other standard techniques, Akamai says.

New APT Group Targets Airline Industry & Immigration

LazyScript bears similarities to some Middle Eastern groups but appears to be a distinct operation of its own, Malwarebytes says.

Cybercriminals Target QuickBooks Databases

Stolen financial files then get sold on the Dark Web, researchers say.

Universities Face Double Threat of Ransomware, Data Breaches

Lack of strong security policies put many schools at risk of compromise, disrupted services, and collateral damage.

Google Invests in Linux Kernel Developers to Focus on Security

Google will fund two full-time Linux kernel developers to maintain and improve Linux security in the long term.

3 Security Flaws in Smart Devices & IoT That Need Fixing

The scope and danger of unsecured, Internet-connected hardware will only continue to deepen.

The Realities of Extended Detection and Response (XDR) Technology

While the term XDR has become pervasive, the technology and market remain a work in progress with lots of innovation and market confusion.

61% of Malware Delivered via Cloud Apps: Report

Researchers report the majority of malware is now delivered via cloud applications - a jump from 48% last year.

Kaseya Buys Managed SOC Provider

Purchase extends offerings for MSP and SMB customers

SolarWinds Attackers Lurked for 'Several Months' in FireEye's Network

Top execs from FireEye, SolarWinds, Microsoft, and CrowdStrike testified before the US Senate Intelligence Committee today on the aftermath - and ongoing investigations - into the epic attacks.

10K Targeted in Phishing Attacks Spoofing FedEx, DHL Express

The two campaigns aimed to steal victims' business email account credentials by posing as the shipping companies.

What Can Your Connected Car Reveal About You?

App developers must take responsibility for the security of users' data.

EDITORS' CHOICE

8 Ways Ransomware Operators Target Your Network

Security researchers explore how criminals are expanding their arsenals with new, more subtle, and more effective ransomware attack techniques.

CVSS as a Framework, Not a Score

The venerable system has served us well but is now outdated. Not that it's time to throw the system away; use it as a framework to measure risk using modern, context-based methods.

LATEST FROM HE EDGE

Cartoon Caption Winner: Be Careful Who You Trust

And the winner of The Edge's February cartoon caption contest is ...

2021 Top Enterprise IT Trends