Dark Reading Daily -- October 04, 2019

Facebook Patches Critical WhatsApp Security Flaw

Bug gives attackers a way to use GIF images to steal data from Android devices running the message app.

Researchers Link Magecart Group 4 to Cobalt Group

Their findings demonstrate how Group 4 is likely conducting server-side skimming in addition to client-side activity.

How FISMA Requirements Relate to Firmware Security

Federal guidelines can help all organizations pragmatically and meaningfully improve their firmware security.

Common Pitfalls of Security Monitoring

We need technology, but we can't forget the importance of humans working methodically to make it effective.

American Express Insider Breaches Cardholder Information

The ex-employee accessed names, Social Security numbers, card numbers, and more in an attempt to commit fraud.

20M Russians' Personal Tax Records Exposed in Data Leak

An unprotected Elasticsearch cluster contained personally identifiable information on Russian citizens from 2009 to 2016.

Cybersecurity Certification in the Spotlight Again

Swiss technology non-profit group joins others, such as the Obama-era President's Commission, in recommending that certain classes of technology products be tested.

Cisco Webex & Zoom Bug Lets Attackers Spy on Conference Calls

The "Prying-Eye" vulnerability could let intruders scan for unprotected meeting IDs and snoop on conference calls.

The Etiquette of Respecting Privacy in the Age of IoT

Is it rude to ask someone to shut off their Alexa? Ask the family who's written the book on etiquette for nearly 100 years - the descendants of Emily Post herself.

EDITORS' CHOICE

8 Microsegmentation Pitfalls to Avoid

Don't fall victim to these common mistakes on the path to developing better security boundaries and limiting the blast radius of security incidents.

Bridging the Gap Between Security & DevOps

An inside look into the engineering mindset of DevOps from the vantage of a career security professional.

NEW FROM THE EDGE

Time to Put This 'Toon to Bed

The winning captions for September's cartoon contest are nothing to yawn about.

Cartoon Contest: Second Wind

Feeling creative? Submit your caption in the comments, and our panel of experts will reward the winner with a $25 Amazon gift card.

7 Threats & Disruptive Forces Changing the Face of Cybersecurity