Dark Reading Weekly -- June 04, 2020

Cybersecurity Spending Hits 'Temporary Pause' Amid Pandemic

For now, security teams face freezes in projects and hiring - and budget cuts, security industry analysts say.

Many Exchange Servers Are Still Vulnerable to Remote Exploit

A privilege-escalation vulnerability patched in February by Microsoft continues to affect Exchange servers, with more than 80% of Internet-connected servers remaining vulnerable, one firm reports.

Abandoned Apps May Pose Security Risk to Mobile Devices

Mobile providers don't often update users when applications are not supported by developers, security firm says.

Rare NSA Advisory About Russia-Based Cyberattacks Unlikely to Stop Them

The Sandworm group -- behind disinformation and election-hacking campaigns and responsible for a 2016 power outage in the Ukraine -- is now targeting e-mail servers.

What Government Contractors Need to Know About NIST, DFARS Password Reqs

Organizations that fail to comply with these rules can get hit with backbreaking fines and class-action lawsuits.

Risk Assessment & the Human Condition

Five lessons the coronavirus pandemic can teach security professionals to better assess, monitor, manage, and mitigate organizational risk.

COVID-19: Latest Security News & Commentary

Check out Dark Reading's updated, exclusive news and commentary surrounding the coronavirus pandemic.

Security 101: SQL Injection

A carefully crafted attack can convince a database to reveal all its secrets. Understanding the basics of what the attack looks like and how to protect against it can go a long way toward limiting the threat.

Data on Indian Mobile Payments App Reportedly Exposed via Open S3 Bucket

Over 7 million records exposed, according to vpnMentor, but app maker says there is no sign of malicious use.

A Rogues' Gallery of MacOS Malware

MacOS isn't immune from malware. Being prepared means understanding the nature of the worst threats a security team is likely to see attacking Macs in the enterprise.

EDITORS' CHOICE

What Usability Means to Security Pros

The last thing cybersecurity executives and practitioners need are even more tools that are difficult to operate. Here's what they look for when assessing new tools.

Digital Distancing with Microsegmentation

Physical distancing has blunted a virus's impact; the same idea can be applied to computers and networks to minimize breaches, attacks, and infections.

NEW FROM THE EDGE

RATs 101: The Grimy Trojans That Scurry Through Remote Access Pipes

Remote Access Trojans (RATs) can be the beginning of very bad things on your network or workstations.

How Cybersecurity Incident Response Programs Work (and Why Some Don't)