Dark Reading Daily -- August 07, 2021

5 Things Incident Responders Wish CISOs Would Prioritize

What's on the incident responder's wish list? If CISOs prioritized these five issues, it would help make security response a whole lot more effective.

Inside the 'Informal Economy' of Workers Supporting Cybercrime

Researchers trace the path users take from using online forums to chatting on cybercrime platforms, and what motivates them.

Why Supply Chain Attacks Are Destined to Escalate

In his keynote address at Black Hat USA on Wednesday, Matt Tait, chief operating officer at Corellium, called for software platform vendors and security researchers to do their part to thwart the fallout of software supply chain compromises.

5 Key Questions When Evaluating Software Supply Chain Security

Knowing what to ask a potential supplier can minimize risks associated with third-party software vulnerabilities and breaches.

What Are Some of the Must-Have Steps in a Ransomware Response Plan?

What should organizations be sure to include in a ransomware response plan, and which steps are commonly missed?

Let the Security Facts Speak for Themselves

Five ways sticking to the facts is good for an organization’s security posture.

Name That Edge Toon: Good Heavens!

Feeling creative? Come up with a clever caption, and our panel of experts will reward the winner with a $25 Amazon gift card.

Inside the Famed Black Hat NOC

Network operations center managers Bart Stump and Neil Wyler (aka Grifter) again head up the show network, but with a new hybrid twist.

101: Why BGP Hijacking Just Won't Die

A look at the dangers of attacks on the Internet's Border Gateway Protocol and what ISPs and enterprises can do about them.

Security 101: The 'PrintNightmare' Flaw

A closer look at the printer software vulnerability - and what you can do about it.

EDITORS' CHOICE

When Software Updates Get Hacked

Darned if you do, darned if you don't: Software fixes have become extensively automated, which works when software supply chains are secure. Yet with attackers focused on compromising those pipelines, is automated patching such a good idea?

FROM THE NEWS DESK

Multiple Zero-Day Flaws Discovered in Popular Hospital Pneumatic Tube System

'PwnedPiper' flaws could allow attackers to disrupt delivery of lab samples, or steal hospital employee credentials, new research shows.

The State of Cybersecurity Incident Response