Dark Reading Weekly -- August 15, 2018

Election Websites, Backend Systems Most at Risk of Cyberattack in Midterms

Both adult and kid hackers demonstrated at DEF CON how the hackable voting machine may be the least of our worries in the 2018 elections.

Microsoft ADFS Vulnerability Lets Attackers Bypass MFA

The flaw lets an attacker use the same second factor to bypass multifactor authentication for any account on the same ADFS service.

Flaws in Mobile Point of Sale Readers Displayed at Black Hat

While security is high overall for mPOS tools from companies like Square, PayPal, and iZettle, some devices have vulnerabilities that attackers could exploit to gather data and cash.

Oracle: Apply Out-of-Band Patch for Database Flaw ASAP

Flaw in the Java VM component of Oracle's Database Server is easily exploitable, security experts warn.

'Election Protection' Aims to Secure Candidates Running for Office

The kit is designed to prevent credential theft targeting people running for federal, state, and local elected offices.

Washington Man Sentenced in Ransomware Conspiracy

A guilty plea brings 18-month sentence on money laundering charges for former Microsoft employee.

Hacker Unlocks 'God Mode' and Shares the 'Key'

A researcher proves that it's possible to break the most fundamental security on some CPUs.

10 Threats Lurking on the Dark Web

Despite some high-profile takedowns last year, the Dark Web remains alive and well. Here's a compilation of some of the more prolific threats that loom.

NSA Brings Nation-State Details to DEF CON

Hackers were eager to hear the latest from the world of nation-state cybersecurity.

EDITORS' CHOICE

6 Eye-Raising Third-Party Breaches

This year's headlines have featured a number of high-profile exposures caused by third parties working on behalf of major brands.

Equifax Avoided Fines, but What If ...?

Let's imagine the consequences the company would have faced if current laws had been on the books earlier.

The Biggest Cybersecurity Breaches of 2018 (So Far)