Dark Reading Daily -- April 23, 2022

10 Signs of a Good Security Leader

Strong leadership can lead to motivated and loyal employees. Here's what that looks like.

Backward-Compatible Post-Quantum Communications Is a Matter of National Security

When a quantum computer can decipher the asymmetric encryption protecting our vital systems, Q-Day will arrive.

Securing the Stopgap: Controlling Access to SaaS Applications

If enterprises continue to use emergency measures as long-term solutions, they must protect their IT estate.

What Steps Do I Take to Shift Left in Security?

Security has benefited from shifting many late-cycle disciplines left or earlier in the cycle.

Adversaries Look for 'Attackability' When Selecting Targets

A large number of enterprise applications are affected by the vulnerability in Log4j, but adversaries aren't just looking for the most common applications. They are looking for targets that are easier to exploit and/or have the biggest payoff.

Security Lessons From a Payment Fraud Attack

Companies need to detect and counteract brute-force and enumeration attacks before fraudsters run away with their customers' funds.

Upgrades for Spring Framework Have Stalled

Upgrading and fixing the vulnerability in the Spring Framework doesn't seem to have the same level of urgency or energy as patching the Log4j library did back in December.

How Do I Conduct a Resilience Review?

As the first step, make sure that all business-critical data across your organization is protected.

ByteChek Founder AJ Yawn Brings Discipline to Everything He Does

Security Pro File: The former Army captain, whose security startup is on an upward trajectory, works hard to "make compliance suck less."

Eliminating Passwords: One Way Forward

Fast Identity Online (FIDO) technology leverages security keys and biometrics to provide secure authentication.

Companies Going to Greater Lengths to Hire Cybersecurity Staff

The cybersecurity market is red-hot. But with so many still-unfilled positions, companies may be more willing to bend or break some hiring rules.

EDITORS' CHOICE

Name That Edge Toon: In Deep Water

Come up with a clever caption, and our panel of experts will reward the winner with a $25 Amazon gift card.

FEATURED ON DR TECH

Exploring Biometrics and Trust at the Corporate Level

Biometric measurements should be part of any multifactor authentication (MFA) strategy, but choose your methods carefully: Some only establish trust at the device level.

FROM THE NEWS DESK

6 Malware Tools Designed to Disrupt Industrial Control Systems (ICS)

Stuxnet was the first known malware built to attack operational technology environment. Since then, there have been several others.

Understanding DNS Threats and How to Use DNS to Expand Your Cybersecurity Arsenal