Dark Reading Daily -- November 04, 2021

CISA Issues New Directive for Patching Known Exploited Vulnerabilities

The goal is to reduce civilian federal agency exposure to attacks that threat actors are actively using in campaigns, agency says.

Researchers Scan the Web to Uncover Malware Infections

Dozens of companies and universities regularly scan the Internet to gather data on connected devices, but some firms are looking deeper to uncover the extent of detectable malware infections.

Infosec and Business Alignment Lowers Breach Cost, Boosts Security

As attacks and security budgets continue to rise, data shows the most secure organizations are the ones that strike a security-business balance.

Risk Quantification: A Powerful Tool in Your Cyberthreat Defense Arsenal

Three ways that understanding your cyber-risk in real dollars can help your organization survive the threat of ransomware and other attacks.

Is Sandboxing Dead?

Organizations should start to evaluate other security measures to replace or complement the once-venerable security sandbox.

Cloud Data Security Startup Launches

TrustLogix aims to streamline and simplify data governance in the cloud.

US Blacklists Israeli Firms NSO Group and Candiru

The US Commerce Department has also added Russia's Positive Technologies and Singapore's Computer Security Initiative Consultancy.

Free Tool Scans Web Servers for Vulnerability to HTTP Header-Smuggling Attacks

A researcher will release an open source tool at Black Hat Europe next week that roots out server weaknesses to a sneaky type of attack.

Understanding the Human Communications Attack Surface

Companies should recognize that collaboration platforms aren't isolated, secure channels where traditional threats don't exist.

APTs, Teleworking, and Advanced VPN Exploits: The Perfect Storm

A Mandiant researcher shares the details of an investigation into the misuse of Pulse Secure VPN devices by suspected state-sponsored threat actors.

EDITORS' CHOICE

Microsoft Expands Security to AWS in Multicloud Push

Microsoft will expand its cloud security tools to AWS within a suite called Defender for Cloud and launch a new Defender for Business in preview later this month.

LATEST FROM THE EDGE

5 MITRE ATT&CK Tactics Most Frequently Detected by Cisco Secure Firewalls

Cisco Security examines the most frequently encountered MITRE ATT&CK tactics and techniques.

LATEST FROM DR TECHNOLOGY

How to Avoid Another Let's Encrypt-Like Meltdown

Experts weigh in on steps network and security administrators need to take before the next time a root certificate expires.

How Enterprises are Attacking the Cybersecurity Problem