Dark Reading Daily -- April 23, 2020

Domain Registrars Under Pressure to Combat COVID-19-Related Scams

A huge increase in malicious website registrations has prompted concern from US lawmakers.

Apple iOS Zero-Day Vulnerabilities Exploited in Targeted Attacks

One of the flaws is remotely exploitable with no user interaction needed, ZecOps says.

Attackers Prefer Ransomware to Stealing Data

Financial data is still in demand, but ransomware becomes the most popular way to try to cash in from compromised companies, according to Trustwave.

IBM Cloud Data Shield Brings Confidential Computing to Public Cloud

The Cloud Data Shield relies on confidential computing, which protects data while it's in use by enterprise applications.

8 Steps to Enhance Government Agencies' Security Posture

Given the heterogeneous architectures of critical state and local systems, it's imperative we learn from the security exposures of other critical infrastructure and pledge to be better

Making the Case for Process Documentation in Cyber Threat Intel

Standard language and processes, not to mention more efficient dissemination of findings and alerts all make documenting your security processes a must

SBA Security Incident May Affect Nearly 8,000 Businesses

Business owners who applied for federal disaster loans may have had information exposed to other applicants, the Small Business Administration reports.

NSA Issues Guidance for Combating Web Shell Malware

The US intelligence agency teamed up with Australian Signals Directorate in newly released information on how to protect Web servers from the malware.

Which InfoSec Jobs Will Best Survive a Recession?

With COVID-19 making a mess of the global economy, companies are seeking to cut corners - and some boardrooms still see security as a "cost center." Are infosec careers vulnerable now?

Automated Bots Are Increasingly Scraping Data & Attempting Logins

The share of bot traffic to online sites declines, but businesses are seeing an overall increase in automated scraping of data, login attempts, and other detrimental activity.

Researchers Use Microsoft Terminal Services Client in New Attack Method

The technique would enable attackers to run malicious code via Remote Desktop Protocol using DLL side-loading to bypass security controls.

EDITORS' CHOICE

10 Standout Security M&A Deals from Q1 2020

The first quarter of 2020 brought investments in enterprise IoT and endpoint security, as well as billion-dollar investments from private equity firms.

11 Tips for Protecting Active Directory While Working from Home

To improve the security of your corporate's network, protect the remote use of AD credentials.

NEW FROM THE EDGE

Learning From the Honeypot: A Researcher and a Duplicitous Docker Image

When Larry Cashdollar set up a honeypot in a Docker image, he found behavior that was more enlightening than he had imagined.

Poll: Worried About Losing Your Job?

With the unemployment rate surging due to COVID-19, are you concerned your job is in jeopardy?

6 Emerging Cyber Threats That Enterprises Face in 2020