Dark Reading Daily -- June 09, 2020

Chinese and Iranian APT Groups Targeted US Presidential Campaigns

Google analysts report advanced persistent threat groups linked to China and Iran launched phishing attacks against the Biden and Trump campaigns.

Flaws Found in Some Open Source Projects Exploited More Often

A study of major open source projects finds that 3.3% of vulnerabilities are exploited, but the rate of exploitation varies significantly.

DARPA Launches Bug Bounty Program

Unlike most crowdsourced vulnerability-hunting projects, this one is targeted at hardware defenses.

Safeguard Your Remote Workforce

DDoS attacks on VPN servers can not only bring remote work to a standstill but also cut off admins from accessing their systems. Here are three ways to stay safer.

Canada's Fitness Depot Alerts Customers to Data Breach

The retailer reports cybercriminals infected its online store and used a fraudulent form to steal shoppers' information.

COVID-19: Latest Security News & Commentary

Check out Dark Reading's updated, exclusive news and commentary surrounding the coronavirus pandemic.

Many Exchange Servers Are Still Vulnerable to Remote Exploit

A privilege-escalation vulnerability patched in February by Microsoft continues to affect Exchange servers, with more than 80% of Internet-connected servers remaining vulnerable, one firm reports.

10 Tips for Maintaining Information Security During Layoffs

Insider cyberthreats are always an issue during layoffs -- but with record numbers of home-office workers heading for the unemployment line, it has never been harder to maintain cybersecurity during offboarding.

New 'Tycoon' Ransomware Strain Targets Windows, Linux

Researchers say Tycoon ransomware, which has targeted software and educational institutions, has a few traits they haven't seen before.

EDITORS' CHOICE

What Usability Means to Security Pros

The last thing cybersecurity executives and practitioners need are even more tools that are difficult to operate. Here's what they look for when assessing new tools.

What Government Contractors Need to Know About NIST, DFARS Password Reqs

Organizations that fail to comply with these rules can get hit with backbreaking fines and class-action lawsuits.

NEW FROM THE EDGE

Name That Toon: Sign of the Tides

Feeling creative? Submit your caption in the comments, and our panel of experts will reward the winner with a $25 Amazon gift card.

How Cybersecurity Incident Response Programs Work (and Why Some Don't)