Dark Reading Daily -- August 09, 2019

Equifax CISO: 'Trust Starts and Ends with You'

Organizational culture is key to good enterprise security posture, Jamil Farshchi told Black Hat attendees.

How Behavioral Data Shaped a Security Training Makeover

A new program leveraged behavioral data of employees to determine when they excelled at security and where they needed improvement.

WhatsApp Messages Can Be Intercepted, Manipulated

Check Point security researchers demonstrate how a dangerous security weakness in the messaging application can be abused to spread fake news and carry out online scams.

Siemens S7 PLCs Share Same Crypto Key Pair, Researchers Find

Researchers at Black Hat USA reveal how security authentication weaknesses in popular Siemens ICS family let them control a PLC.

Yes, FaceApp Really Could Be Sending Your Data to Russia

FaceApp has an unprecedented level of access to data from 150 million users. What could its endgame be? We unpack three potential risks.

Ransomware Shifts Focus from Consumers to Businesses

In addition, ransomware seems likely to continue its evolution in the second half of 2019.

How to Keep Your Web Servers Secure

The good news is that Web servers have come a long way in terms of security. But to err is human, even for IT and security people.

Capital One: What We Should Learn This Time

Where Capital One went wrong, what the bank did right, and more key takeaways from the latest mega-breach.

Cisco Pays $8.6M in First False Claims Suit for Vulnerabilities in Security Product

A security consultant reported vulnerabilities in Cisco's Video Surveillance Manager in 2009 - but the company ignored the issues and fired the consultant.

EDITORS' CHOICE

8 Head-Turning Ransomware Attacks to Hit City Governments

Hackers know vulnerable systems when they see them, and they also know this: Many government systems are decades old, running Windows 7 and even Windows XP.

NEW FROM THE EDGE

Slow Your Roll Before Disclosing a Security Incident

Transparency rules, but taking the right amount of time to figure out what happened will go a long way toward setting the record straight.

7 Threats & Disruptive Forces Changing the Face of Cybersecurity