Dark Reading Daily -- August 02, 2019

Cisco Pays $8.6M in First False Claims Suit for Vulnerabilities in Security Product

A security consultant reported vulnerabilities in Cisco's Video Surveillance Manager in 2009 - but the company ignored the issues and fired the consultant.

47% of Android Anti-Malware Apps Are Flawed

Protection failures come at a time when malicious Android software is becoming more of a problem.

PCI Security Council, Retail ISAC Warn Retailers on Magecart Attacks

Online card-skimming activities grew sharply this summer fueled by the availability of attack kits and other factors, Malwarebytes says.

DARPA to Bring its Smart Ballot Boxes to DEF CON for Hacking

The agency this week will share the source code and hardware specifications for the secure voting system prototypes.

Why Every Organization Needs an Incident Response Plan

OK, perhaps that's self-evident, so how come it far too often still takes an incident to trigger planning?

SecOps Success Through Employee Retention

To keep your turnover low, focus on these areas: compensation, advancement opportunities, training, and environment.

1M Payment Cards Exposed in South Korea Breach

South Korea is the largest victim of card present data theft at a time when criminals are ramping up cyberattacks in the Asia-Pacific region.

Researcher Find Open 'Road Map' to Honda Computers

An unprotected database, now secured, contained information on every computer owned by the automobile giant.

Companies' 'Anonymized' Data May Violate GDPR, Privacy Regs

New study found that any database containing 15 pieces of demographic data could be used to identify individuals.

Sextortion Email Scams Rise Sharply

Cybercriminals are increasingly trying to trick people into paying ransoms by threatening to expose compromising activities to friends and family.

4 Network Security Mistakes Bound to Bite You

It's Shark Week again! Are you ready to outmaneuver sharks of the cyber variety? These tips can help.

EDITORS' CHOICE

8 Free Tools to Be Showcased at Black Hat and DEF CON

Expect a full slate of enterprise-class open source tools to take the spotlight when security researchers share their bounties with the community at large.

Demystifying New FIDO Standards & Innovations

Staying on top of the latest cybersecurity risks and preferred attack methods can feel impossible, but standards like FIDO2 are designed to help relieve the burden.

NEW FROM THE EDGE

Why Every Organization Needs an Incident Response Plan

OK, perhaps that's self-evident, so how come it far too often still takes an incident to trigger planning?

Building and Managing an IT Security Operations Program