Dark Reading Weekly -- November 14, 2019

While CISOs Fret, Business Leaders Tout Security Robustness

A new Nominet survey shows a familiar disconnect between business and security teams on the matter of cyber preparedness.

The Ripple Effect of Data Breaches: How Damage Spreads

The financial loss from so-called 'ripple events' is thirteen times greater than the cost of single-party security incidents.

Bugcrowd Pays Out Over $500K in Bounties in One Week

In all, bug hunters from around the world submitted over 6,500 vulnerabilities in October alone.

Researchers Find New Approach to Attacking Cloud Infrastructure

Cloud APIs' accessibility over the Internet opens a new window for adversaries to gain highly privileged access to cloud assets.

Twitter & Trend Micro Fall Victim to Malicious Insiders

The companies are the latest on a long and growing list of organizations that have fallen victim to users with legitimate access to enterprise systems and data.

To Prove Cybersecurity's Worth, Create a Cyber Balance Sheet

How tying and measuring security investments to business impacts can elevate executives' understanding and commitment to cyber-risk reduction.

9 Principles to Simplify Security

This isn't a one-size-fits-all situation. Simplify as much as you can, as the saying goes, but no more than that.

Why Cyber-Risk Is a C-Suite Issue

Organizations realize the scale of cyber-risk but lack counter-actions to build resilience.

Find New Talent, Don't Fight Over CISSPs: Insights from (ISC)2 COO

The skills gap will only be closed by attracting and retaining new talent. So don't limit your talent search to CISSPs, says the COO of the organization that issues the CISSP certification.

Ring Flaw Underscores Impact of IoT Vulnerabilities

A vulnerability in Amazon's Ring doorbell cameras would have allowed a local attacker to gain access to a target's entire wireless network.

SHAKEN/STIR: Finally! A Solution to Caller ID Spoofing?

The ubiquitous Caller ID hasn't changed much over the years, but the technology to exploit it has exploded. That may be about to change.

EDITORS' CHOICE

6 Small-Business Password Managers

The right password manager can help bring enterprise-class security to small businesses. Here are a half-dozen candidates to strengthen your access management.

Name That Toon: Endpoint Protection

We provide the cartoon. You write the caption. Enter to win a $25 Amazon gift card.

NEW FROM THE EDGE

Account Fraud Harder to Detect as Criminals Move from Bots to 'Sweat Shops'

Cheap labor, frequent data breaches, and better fraud detection technology are fueling frustrating changes in attackers' methods.

Well, Hello, Dolly!

Eight hours is certainly a start.

7 Threats & Disruptive Forces Changing the Face of Cybersecurity