Dark Reading Weekly -- November 07, 2019

Microsoft Security Setting Ironically Increases Risks for Office for Mac Users

Excel's handling of an old macro format gives unauthenticated remote attackers a way to take control of vulnerable systems, Carnegie Mellon's CERT/CC says.

Free & Discounted Security Services Now Available for US Election Orgs

Nonprofit Defending Digital Campaigns (DDC) offers security services for email, user education, mobile, and encrypted communications, to federal election committees.

10 Tips for Building Compliance by Design into Cloud Architecture

A pair of experts pass along lessons learned while building out the team and processes necessary to support Starbucks' mobile app.

Google Launches OpenTitan Project to Open Source Chip Security

OpenTitan is an open source collaboration among Google and technology companies to strengthen root-of-trust chip design.

Kaspersky Lab Analysis Shines Light on DarkUniverse APT Group

Threat actor was active between 2009 and 2017, targeting military, government, and private organizations.

Social Media: Corporate Cyber Espionage's Channel of Choice

Proactive defense and automation can help your company deal with scale and prioritize risks in order to more efficiently fight cyber espionage.

The State of Email Security and Protection

Phishing and ransomware top the list of security risks that organizations are not fully prepared to deal with.

32,000+ WiFi Routers Potentially Exposed to New Gafgyt Variant

Researchers detect an updated Gafgyt variant that targets flaws in small office and home wireless routers from Zyxel, Huawei, and Realtek.

How HR and IT Can Partner to Improve Cybersecurity

With their lens into the human side of business, human resources can be an effective partner is the effort to train employees on awareness and keep an organization secure.

Siemens PLC Feature Can Be Exploited for Evil - and for Good

A hidden feature in some newer models of the vendor's programmable logic controllers leaves the devices open to attack. Siemens says it plans to fix it.

EDITORS' CHOICE

8 Holiday Security Tips for Retailers

Here's how retailers can protect their businesses from attackers and scammers hoping to wreak havoc during the most wonderful time of the year.

The Uphill Battle of Triaging Alerts

Prioritizing alerts is foundational to security, but almost every organization struggles to manage this process efficiently. Here's what you can do about it.

NEW FROM THE EDGE

What a Security Products Blacklist Means for End Users & Integrators

A recent US Commerce Department blacklist of several Chinese entities leaves a looming question: What happens if your products are now prohibited?

A Warning About Viruses From Weird Al

Should you get an e-mail with the subject 'stinky cheese'...

7 Threats & Disruptive Forces Changing the Face of Cybersecurity