Dark Reading Daily -- January 27, 2022

Experts Urge Firms to Patch Trivial-to-Exploit Flaw in Linux PolicyKit

The memory corruption vulnerability in a policy component installed by default on most Linux distributions allows any user to become root. Researchers have already reproduced the exploit.

Millions of Routers, IoT Devices at Risk as Malware Source Code Surfaces on GitHub

"BotenaGo" contains exploits for more than 30 vulnerabilities in multiple vendor products and is being used to spread Mirai botnet malware, security vendor says.

VPNLab.net Shuttered in Latest Spate of Global Takedowns

Europol and 10 nations seized servers and disconnected the anonymous network allegedly used by many cybercriminals in the latest effort to hobble cybercrime groups.

Cybersecurity Is Broken: How We Got Here & How to Start Fixing It

It's not just your imagination — malicious threats have exponentially increased organizational risk.

Why It's Time to Rethink Incident Response

The incident response landscape has changed drastically, largely from shifting attitudes among insurance companies and, to some extent, business customers feeling the pain of security incidents.

OMB Issues Zero-Trust Strategy for Federal Agencies

Federal officials tout the strategy as a more proactive approach to securing government networks.

Researchers Discover Dangerous Firmware-Level Rootkit

MoonBounce is the latest in a small but growing number of implants found hidden in a computer's Unified Extensible Firmware Interface (UEFI).

Cyber-Physical Security: What It Is and What You Should Do

Ancillary installations like the Internet of Things, operational technology, and industrial control systems enable lots of great functionality, and they face most of the same risks as IT infrastructure.

Remotely Exploitable NetUSB Flaw Puts Millions of Devices at Risk

A vulnerability in a third-party component used by many networking firms puts consumer and small business routers at risk for remote exploitation.

EDITORS' CHOICE

8 Security Startups to Watch in 2022

Cloud security, API security, and incident response are among the issues up-and-coming security companies are working on.

LATEST FROM THE EDGE

IT Pros May Use Cloud, But They Trust On-Prem More

While opinions about the trustworthiness of the cloud are split, everyone believes that's where hackers will focus their efforts.

LATEST FROM DR TECHNOLOGY

JFrog's New Tools Flag Malicious JavaScript Packages

The three open source tools flag malicious JavaScript packages before they are downloaded and installed from the npm package manager.

How Enterprises Are Assessing Cybersecurity Risk in Today's Environment