Dark Reading Daily -- July 24, 2019

Bug Bounties Continue to Rise as Google Boosts its Payouts

Reward for vulnerability research climbed 83% in the past year.

Penetration Test Data Shows Risk to Domain Admin Credentials

But gaining a foothold on the LAN via vulnerabilities on Internet-facing assets is becoming harder, Rapid7 found in its real-world pen tests.

Malware-based Attacks Dropped 20% Worldwide

Meanwhile, criminals waged more encrypted, ransomware, and IoT attacks.

Business Email Compromise: Thinking Beyond Wire Transfers

As BEC continues to drive record-high losses, cybercriminals devise new tactics for swindling corporate targets out of millions.

New IPS Architecture Uses Network Flow Data for Analysis

Can a stream of data intended for network performance monitoring be the basis of network security? One company says the answer is 'yes.'

The War for Cyber Talent Will Be Won by Retention not Recruitment

Six steps for creating a work environment that challenges, stimulates, rewards, and constantly engages employees fighting the good fight against cybercriminals.

Russia Attempted to De-Anonymize Tor Browser: Report

An attempt to crack Tor was one of many projects hackers discovered when they broke into Russian intelligence contractor SyTech.

CISA Warns Public About the Risks of 5G

Vulnerabilities include everything from physical risks through the supply chain to business risks.

How Cybercriminals Break into the Microsoft Cloud

Microsoft and Trimarc researchers explore the most common attacks against the cloud and effective defenses and mitigation.

8 Legit Tools and Utilities That Cybercriminals Commonly Misuse

Threat actors are increasingly 'living off the land,' using publicly available management and administration tools to conceal malicious activity.

The 10 Essentials of Infosec Forensics

Whether it's your first investigation or 500th, review the basics of IT forensics to streamline and simplify your discovery.

EDITORS' CHOICE

6 Actions That Made GDPR Real in 2019

In the wake of recent fines levied against British Airways, Marriott, and Facebook, companies are starting to take data privacy and security more seriously.

CISO Pressures: Why the Role Stinks and How to Fix It

CISOs spend much less time in their role than other members of the boardroom. It's a serious problem that must be addressed.

NEW FROM THE EDGE

VPNs' Future: Less Reliant on Users, More Transparent, And Smarter

Virtual private networking is poised to become more automated and intelligent, especially as endpoints associated with cloud services and the IoT need protection.

Building and Managing an IT Security Operations Program