Dark Reading Daily -- December 10, 2021

Emotet Is Back and More Dangerous Than Before

Volume of traffic associated with the malware is now back at 50% of the volume before law enforcement took the botnet operation down in January 2021, security vendor says.

Lack of Patching Leaves 300,000 Routers at Risk for Attack

A significant percentage of the 2 million consumer and small-business routers produced by a Latvian firm are vulnerable and being used by attackers, a security firm says.

Researchers Explore Microsoft Outlook Phishing Techniques

Outlook features intended to improve collaboration and productivity may make social engineering attacks more effective, researchers find.

How to Build a Better Internal Fraud Protection Program

Fraud awareness training is just the beginning.

Why the Private Sector Is Key to Stopping Russian Hacking Group APT29

Left unchecked, these attacks could have devastating effects on government and military secrets and jeopardize the software supply chain and the global economy.

One-Third of Phishing Pages Active Less Than a Day

Security experts say the first hours in a phishing page's life are the most dangerous for users.

Newly Found Authentication Flaws Highlight Dangers of Coding From Scratch

Two vulnerabilities in a call-center software suite could allow an attacker to take over the application server, researchers found.

Why Cloud Service Providers Are a Single Point of Failure

In a matter of days, a large-scale outage of cloud and other online services could cause $15 billion in losses.

Virtual-Network Vulnerability Found in AWS, Other Clouds

The privilege-escalation flaws affect Amazon WorkSpaces and more than a dozen services that use a particular implementation of USB over Ethernet.

EDITORS' CHOICE

In Appreciation: Dark Reading's Tim Wilson

Dark Reading co-founder and editor-in-chief Tim Wilson passed away on Nov. 23.

LATEST FROM THE EDGE

Why Red Teaming While Black Can Be Risky

Penetration audits can be dangerous for people of color. Here is how to keep Black and brown cybersecurity professionals safe during red team engagements.

LATEST FROM DR TECHNOLOGY

New Firefox Sandbox Isolates Third-Party Libraries

RLBox can be used to protect web browsers and other software applications from vulnerabilities in subcomponents and libraries.

How Data Breaches Affect the Enterprise