Dark Reading Daily -- July 27, 2020

Email Security Features Fail to Prevent Phishable 'From' Addresses

The security features for verifying the source of an email header fail to work together properly in many implementations, according to a team of researchers.

Block/Allow: The Changing Face of Hacker Linguistics

Terms such as "whitelist," "blacklist," "master," and "slave" are being scrutinized again and by a wider range of tech companies than ever before.

Organizations Continue to Struggle With App Vulns

A high percentage of discovered bugs remain unremediated for a long time, a new study shows.

Remote Work Could Help Cybersecurity's Diversity Problem - But Will It?

Job market data from the second quarter suggests there are increasing opportunities for women and minorities in the world of remote work, but long-standing biases may provide resistance.

Access to Internal Twitter Admin Tools Is Widespread

More than 1,000 individuals have access to tools that could have aided the attackers in the recent Twitter attack on high-profile accounts.

Garmin Takes App & Services Offline After Suspected Ransomware Attack

Wearables company Garmin shut down its website, app, call centers, and other services in the aftermath of a security incident.

Banning TikTok Won't Solve Our Privacy Problems

Preventing the use of an apps based solely on its country of origin (no matter how hostile) is merely a Band-Aid that won't fully address all privacy and security concerns.

COVID-19: Latest Security News & Commentary

Check out Dark Reading's updated, exclusive news and commentary surrounding the coronavirus pandemic.

Microsoft 365 Updated with New Security, Risk, Compliance Tools

Updates built for remote employees include an endpoint data loss prevention platform, insider risk management, and double key encryption.

Cybersecurity Lessons from the Pandemic

How does cybersecurity support business and society? The pandemic shows us.

Twilio Security Incident Shows Danger of Misconfigured S3 Buckets

Twilio says attackers accessed its misconfigured cloud storage system and altered a copy of the JavaScriptSDK it shares with customers.

EDITORS' CHOICE

7 Summer Travel Security Tips

With staying safe during the pandemic high priority, it's easy to let your guard down about the security of the devices you take along your travels.

Deepfakes & James Bond Research Project: Cool but Dangerous

Open source software for creating deepfakes is getting better and better, to the chagrin of researchers

NEW FROM THE EDGE

Rise of the Robots: How You Should Secure RPA

Robotic Process Automation (RPA) is the next big thing in innovation and digital strategy. But what security details are overlooked in the rush to implement bots?

Special Report: Computing's New Normal, a Dark Reading Perspective