Dark Reading Daily -- December 04, 2019

TrickBot Expands in Japan Ahead of the Holidays

Data indicates TrickBot operators are modifying its modules and launching widespread campaigns around the world.

Leveraging the Cloud for Cyber Intelligence

How fusing output datasets and sharing information can create a real-time understanding of suspicious activity across your enterprise.

When Rogue Insiders Go to the Dark Web

Employees gone bad sell stolen company information, sometimes openly touting their companies, researchers say.

Siemens Offers Workarounds for Newly Found PLC Vulnerability

An undocumented hardware-based special access feature recently found by researchers in Siemens' S7-1200 can be used by attackers to gain control of the industrial devices.

What Security Leaders Can Learn from Marketing

Employees can no longer be pawns who must be protected all the time. They must become partners in the battle against threats.

Smith & Wesson Is Magecart's Latest Target

Researchers estimate the gun manufacturer's website was compromised sometime before Black Friday.

SQL Injection Errors No Longer the Top Software Security Issue

In newly updated Common Weakness Enumeration (CWE), SQL injection now ranks sixth.

New Free Emulator Challenges Apple's Control of iOS

An open-source tool gives researchers and jailbreakers a free option for researching vulnerabilities in the operating system - and gives Apple a new headache.

StrandHogg Vulnerability Affects All Versions of Android

The bug enables malware to pose as any legitimate Android app, letting attackers track messages, photos, credentials, and phone conversations.

EDITORS' CHOICE

Cybersecurity Team Holiday Guide: 2019 Gag Gift Edition

Make your favorite security experts laugh with these affordable holiday gifts.

3 Modern Myths of Threat Intelligence

More intelligence does not lead to more security. Here's why.

NEW FROM THE EDGE

Poll Results: Security Pros Make The (Hypothetically) Ultimate Data Decision

What if you could protect only one category of your organization's data?

A Cause You Care About Needs Your Cybersecurity Help

By donating their security expertise, infosec professionals are supporting nonprofits, advocacy groups, and communities in need.

Navigating the Deluge of Security Data