Dark Reading Daily -- August 18, 2021

Critical Vulnerability Affects Millions of IoT Devices

CISA, Mandiant, and ThroughTek share the details of a vulnerability that could allow attackers to observe camera feeds and remotely control devices.

Zero-Day Flaw Found in Fortinet's FortiWeb WAF Technology

Vendor says it plans to have a patch for the vulnerability by this weekend.

Metrics That Matter: A Guide to Enhancing Security Reporting

Are your reports neglected or ignored? Up your game around the metrics you use to measure protection.

It's Not Your Imagination: API and Web Security Is Getting Harder

With today's pace of rapid change, security must live everywhere that apps and APIs reside, and organizations can no longer rely on tools that weren't built with the decentralized enterprise in mind.

'BadAlloc' Vuln Affects Devices Using Older BlackBerry QNX Products

CISA warns organizations with devices running affected QNX-based systems to "immediately apply mitigations" to protect them.

Phishing Costs Reach New High of $14.8M: Report

Research finds phishing costs have quadrupled in recent years, costing companies millions of dollars and thousands of hours in wasted time.

Contain a Ransomware Attack Before It Spreads

While ransomware attacks can be difficult to proactively prevent, enterprises can stop them from spreading and avoid extensive damage by implementing several key defensive measures.

Cost of Cyberattacks Significantly Higher for Smaller Healthcare Organizations

Significant oversights, such as lack of automation and continued vulnerability to old threats, leave healthcare organizations at risk.

14 Vulnerabilities Found in Widely Used TCP/IP Stack

"Infra:Halt" flaws in NicheStack impact potentially millions of devices used in OT and industrial control system environments, analysts say.

EDITORS' CHOICE

Troubling New Disk-Level Encryption Ransomware Surfaces

"DeepBlueMagic" also deletes Volume Shadow copy for Windows, making recovery all but impossible without a decryption key.

7 Steps to a More Secure Social Media Policy

Social media accounts must be viewed as part of the IT and security infrastructure. Follow these tips for developing a workable social media security program at your company.

LATEST FROM THE EDGE

NIST Misses Opportunity With New 'Minimum Standard' for Software Security Testing

The agency's response to President Biden's executive order creates serious, unresolved questions across the required techniques.

Enterprise Cybersecurity Plans in a Post-Pandemic World