Dark Reading Daily -- December 11, 2020

FireEye Breach Fallout Yet to Be Felt

Aftermath of the FireEye breach by Russia's foreign service agency raises concerns over what the attackers could do next - and how to defend against it.

Contact-Tracing Apps Still Expose Users to Security, Privacy Issues

Of nearly 100 apps tested, 40% have significant security issues, using either GPS locations or bespoke Bluetooth proximity detection to determine exposure.

'Fingerprint-Jacking' Attack Technique Manipulates Android UI

Researchers explore fingerprint-jacking, a user interface-based attack that targets fingerprints scanned into Android apps.

Knowing What the Enemy Knows Is Key to Proper Defense

Think like an attacker if you want to understand your attack surface, says security researcher at Black Hat Europe.

Cloud Identity and Access Management: Understanding the Chain of Access

Here's where enterprises encounter challenges with cloud IAM and the best practices they should follow to correct these mistakes.

The Line Between Physical Security & Cybersecurity Blurs as World Gets More Digital

Security teams are being challenged by the connected nature of IP devices, and preventing them from being compromised by cybercriminals has become an essential part of keeping people and property safe.

Google Shares Cloud Security Tips

Anton Chuvakin, head of solution strategy at Google Cloud Security, discusses common cloud security hurdles and how to get over them.

85,000 MySQL Servers Hit in Active Ransomware Campaign

Attackers pressure victims into paying ransom by publishing and offering for sale data stolen in a campaign that dates back to January.

Juvenile Pleads Guilty to 2016 DNS Attack

Mirai botnet was used to target Sony in an attack that took down DynDNS and a number of its notable customers.

Phishing Campaign Targets 200M Microsoft 365 Accounts

A well-organized email spoofing campaign has been seen targeting financial services, insurance, healthcare, manufacturing, utilities, and telecom.

Ransomware Makes Up Half of All Major Incidents

Misconfigurations and lack of visibility allow attackers to compromise networks and monetize their intrusions, according to CrowdStrike's analysis of about 200 incidents.

Attackers Know Microsoft 365 Better Than You Do

Users have taken to Microsoft Office 365's tools, but many are unaware of free features that come with their accounts -- features that would keep them safe.

EDITORS' CHOICE

Black Hat Europe: Dark Reading Video News Desk Coverage

Coming to you from virtual backgrounds and beautifully curated bookcases around the world, Dark Reading brings you video interviews with the leading researchers speaking at this week's Black Hat Europe.

Why Compliance Is No Longer King for Financial Services Cybersecurity

Financial services companies' experience in risk management serves them well when it comes to minimizing their cyber-risk.

LATEST FROM THE EDGE

51% of Edge Readers Plan to Pursue New Cybersecurity Certification in 2021

Demands of the "new normal" won't stop the majority of poll-takers from mastering new skills.

2020: The Year in Security