Dark Reading Daily -- December 17, 2020

FireEye Identifies Killswitch for SolarWinds Malware as Victims Scramble to Respond

White House National Security Council establishes unified group to coordinate response across federal agencies to the threat.

US-CERT Reports 17,447 Vulnerabilities Recorded in 2020

This marks the fourth year in a row that a record number of vulnerabilities has been discovered, following 17,306 in 2019.

Patching Still Poses Problems for Industrial Controllers, Networking Devices

More than 90% of devices that run the popular VxWorks embedded operating system remain vulnerable to critical flaws disclosed more than a year ago.

Senior Managers Twice as Likely to Share Work Devices With Outsiders

New survey finds top C-suite managers are much shakier on security than their junior counterparts.

Corporate Credentials for Sale on the Dark Web: How to Protect Employees and Data

It's past time to retire passwords in favor of other methods for authenticating users and securing systems.

SSO and MFA Are Only Half Your Identity Governance Strategy

We need better ways to manage user identities for accessing applications, especially given the strain it places on overworked IT and security teams.

Why the Weakest Links Matter

The recent FireEye and SolarWinds compromises reinforce the fact that risks should be understood, controls should be in place, and care should be taken at every opportunity.

New IRS Form Fraud Campaign Targets G Suite Users

At least 50,000 executives have been affected so far.

Attackers Leverage IMAP to Infiltrate Email Accounts

Researchers believe cybercriminals are using a tool dubbed Email Appender to directly connect with compromised email accounts via IMAP.

Medical Imaging Leaks Highlight Unhealthy Security Practices

More than 45 million unique images, such as X-rays and MRI scans, are accessible to anyone on the Internet, security firm says.

2021 Security Budgets: Top Priorities, New Realities

An unprecedented 2020 has shaken up security leaders' usual list of must-have technologies. What's on the horizon? They share with us their spending plans for 2021.

The Private Sector Needs a Cybersecurity Transformation

Cybersecurity must get to the point where it's equated with actually stopping an attack by identifying the methods the bad guys use and taking those methods away.

EDITORS' CHOICE

7 Security Tips for Gamers

Gamers can expect to be prime targets over the holidays as COVID-19 rages on. Here's some advice on how to keep hackers at bay.

Flash Poll: Ransomware Response

How confident are you in your organization's plan for responding to a ransomware attack? Let us know.

LATEST FROM THE EDGE

Why Secure Email Gateways Rewrite Links (and Why They Shouldn't)

Redirecting a user to a trusted server buys a secure email gateway company some time while it decides whether a URL is malicious -- but there are avoidable drawbacks to this approach.

2020: The Year in Security