Dark Reading Daily -- June 12, 2020

FBI Says Sudden Increase in Mobile Banking Is Heightening Risks For Users

Mobile malware and fake apps purporting to be legitimate banking software are big risks, law enforcement agency says.

ICS Threat Snake Ransomware Suspected in Honda Attack

An attack targeting the automaker reportedly infected internal servers and led to the suspension of production at plants around the world.

Attack Surface Area Larger Than Most Businesses Believe

Workers are not the only outside-the-perimeter security risk. Companies have a variety of vulnerable Internet-facing resources exposing their business to risk, study finds.

Siemens Teams Up in OT Endpoint Security

Machine language-based endpoint security collaboration with SparkCognition is the latest move by Siemens in security.

What COVID-19 Teaches Us About Social Engineering

Unless we do something proactively, social engineering's impact is expected to keep getting worse as people's reliance on technology increases and as more of us are forced to work from home.

'Highly Active' APT Group Targeting Microsoft Office, Outlook

The Gamaredon group has ramped up activity in recent months and makes no effort to stay under the radar, researchers report.

Protocol Vulnerability Threatens Mobile Networks

A vuln in the GTP protocol could allow DoS, fraud, and data theft attacks against cellular networks from virtually anywhere.

Microsoft Fixes 129 Bugs in Largest Patch Tuesday Release

The June release of security updates addresses several remote code execution vulnerabilities in SharePoint, Excel, Windows OLE, and other services.

Q&A: Eugene Spafford on the Risks of Internet Voting

Allowing people to cast their ballots online to circumvent coronavirus-related health concerns introduces problems that we simply don't know how to manage, says the Purdue University professor and security leader.

Vulnerability in Plug-and-Play Protocol Puts Billions of Devices at Risk

"CallStranger" flaw in UPnP allows attackers to launch DDoS attacks and scan internal ports, security researcher says.

EDITORS' CHOICE

What Usability Means to Security Pros

The last thing cybersecurity executives and practitioners need are even more tools that are difficult to operate. Here's what they look for when assessing new tools.

The Hitchhiker's Guide to Web App Pen Testing

Time on your hands and looking to learn about web apps? Here's a list to get you started.

NEW FROM THE EDGE

Asset Management Mess? How to Get Organized

Hardware and software deployments all over the place due to the pandemic scramble? Here are the essential steps to ensure you can find what you need -- and secure it.

How Cybersecurity Incident Response Programs Work (and Why Some Don't)