Dark Reading Daily -- June 17, 2023

Follow Dark Reading:

June 17, 2023

LATEST SECURITY FEATURES & COMMENTARY

How Do I Protect My API Keys From Appearing in Search Results?

A few lines of code can help you prevent accidental exposure, manage sensitive information, and maintain different configurations for various environments.

Network-Security Testing Standard Nears Prime Time

NetSecOpen recently released a new draft of its testing and benchmarking guide, which could be adopted later this year.

The Infrastructure Security Engineer Is a Unicorn Among Thoroughbreds

This new role safeguarding cloud deployments requires an exceedingly rare set of technical and soft skills.

10 Important Security Tasks You Shouldn't Skip

Time and money are valuable and finite, but some actions are well worth spending those resources on.

Passkeys See Fresh Momentum With New Pilot Programs

Apple adds API that will enable sharing of passkeys across platforms, and Google offers passkey authentication in beta for Google Workspace and Google Cloud.


HOT TOPICS
Researchers Report First Instance of Automated SaaS Ransomware Extortion The attack highlights growing interest among threat actors to target data from software-as-a-service providers. Russian APT 'Cadet Blizzard' Behind Ukraine Wiper Attacks Microsoft says Cadet Blizzard wielded a custom wiper malware in the weeks leading up to Russia's invasion of Ukraine, and it remains capable of wanton destruction. Microsoft Fixes 69 Bugs, but None Are Zero-Days The June 2023 Patch Tuesday security update included fixes for a bypass for two previously addressed issues in Microsoft Exchange and a critical elevation of privilege flaw in SharePoint Server. MORE

EDITORS' CHOICE

Defenders Buckle Up for a Future of Detecting Deepfakes

Today technology companies have high success rates against generative AI-created voices and videos, but future detection will be much more difficult.

3 Elite Communication Skills to Help Security Pros Get Projects Funded

It's not enough to know how to better protect the enterprise — you have to be able to convince decision-makers that your plans are necessary.

Name That Edge Toon: Spring Chickens

Come up with a clever caption, and our panel of experts will reward the winner with a $25 Amazon gift card.

WEBINARS

Why Threat Intelligence Makes Sense for Your Enterprise Security Strategy
Threat intelligence -- collecting data about broad trends in online attacks -- helps security teams improve their defenses by identifying online exploits that have the potential to hit their organizations and to prioritize their security resources accordingly. But how should ...
Secrets to a Successful Managed Security Service Provider Relationship
Sometimes, the security team you have just isn't enough. To help keep up with security threats 24/7 - and to bolster skills the team may not have -- many enterprises are working with managed security service providers (MSSPs) and security providers ...

View More Dark Reading Webinars >>

WHITE PAPERS

View More White Papers >>

FEATURED REPORTS

Everything You Need to Know About DNS Attacks
How Enterprises Are Managing Application Security Risks in a Heightened Threat Environment
Concerns over API security and low-code/no-code use added to an already-full plate of application security challenges for many organizations over the last year. IT and security decision-makers are deeply concerned about compromises resulting from vulnerabilities in the software supply ...
Shoring Up the Software Supply Chain Across Enterprise Applications
Supply chain security attacks are growing at an alarming pace, and things are going to keep getting worse until DevSecOps teams get on the same page. A little help from the feds could also be welcome Modern-day software development depends ...

View More Dark Reading Reports >>

PRODUCTS & RELEASES

Use of Multifactor Authentication (MFA) Nearly Doubles Since 2020, Okta Secure Sign-in Trends Report Finds

Vulcan Cyber Is a Launch Partner for Wiz Integrations (WIN) Platform

Keytos Uncovers 15,000 Vulnerable Subdomains per Month in Azure Using Cryptographic Certificates

Coalition Releases Security Vulnerability Exploit Scoring System

Thales Proposes to Acquire Tesserent, Expanding its Global Cybersecurity Leadership

Cycode Launches CI/CD Pipeline Monitoring Solution (Cimon) to Prevent Supply Chain Attacks

Action1 Announces $20M Investment in Its Patch Management Platform

MORE PRODUCTS & RELEASES

CURRENT ISSUE

How to Use Threat Intelligence to Mitigate Third-Party Risk
DOWNLOAD THIS ISSUE
VIEW BACK ISSUES

Dark Reading Daily
-- Published By Dark Reading
Informa Tech Holdings LLC | Registered in the United States
with number 7418737 | 605 Third Ave., 22nd Floor, New York, New York 10158, USA

To opt-out of any future Dark Reading Daily Newsletter emails, please respond here.

Thoughts about this newsletter? Give us feedback.

Keep This Newsletter Out Of Your SPAM Folder
Don't let future editions go missing. Take a moment to add the newsletter's address to your anti-spam white list:

If you're not sure how to do that, ask your administrator or ISP. Or check your anti-spam utility's documentation.

We take your privacy very seriously. Please review our Privacy Statement.

How to Use Threat Intelligence to Mitigate Third-Party Risk