Dark Reading Weekly -- April 18, 2019

Decoding a 'New' Elite Cyber Espionage Team

Stealthy and well-heeled hacking group went undetected for five years and wields a massive attack framework of some 80 different modules.

Nation-State Hacker Group Hijacking DNS to Redirect Email, Web Traffic

'Sea Turtle' group has compromised at least 40 national security organizations in 13 countries so far, Cisco Talos says.

VPN Vulnerabilities Point Out Need for Comprehensive Remote Security

VPNs are the primary tool for securing remote access, but recently disclosed vulnerabilities point out the weakness of relying on them as the only tool.

Security Audit Shows Gains, Though Privacy Lags

The 2018 Online Trust Audit shows that "encryption everywhere" is improving security, while fuzzy language is slowing privacy gains.

Microsoft Downplays Scope of Email Attack

An unknown attacker used a support agent's credentials to access email content belonging to some Outlook, Hotmail users.

Tips for the Aftermath of a Cyberattack

Incident response demands technical expertise, but you can't fully recover without non-IT experts.

New Attacks (and Old Attacks Made New)

Although new attacks might get the most attention, don't assume old ones have gone away.

8 'SOC-as-a-Service' Offerings

These new cloud services seek to help companies figure out what their traditional SIEM alerts mean, plus how they can prioritize responses and improve their security operations.

The Single Cybersecurity Question Every CISO Should Ask

The answer can lead to a scalable enterprise security solution for 2019 and beyond.

New 'HOPLIGHT' Malware Appears in Latest North Korean Attacks, Say DHS, FBI

The FBI and Department of Homeland Security release malware analysis report, indicators of compromise for nine different executable files.

EDITORS' CHOICE

7 Tips for an Effective Employee Security Awareness Program

Breaches and compliance requirements have heightened the need for continuous and effective employee training, security experts say.

Legacy Apps: The Security Risk Lurking in Dusty Corners

Four best practices to keep old code from compromising your enterprise environment.

5 Emerging Cyber Threats to Watch for in 2019