Dark Reading Daily -- August 27, 2020

Higher Education CISOs Share COVID-19 Response Stories

Security leaders from Stanford, Ohio State, and the University of Chicago share challenges and response tactics from the COVID-19 pandemic.

With More Use of Cloud, Passwords Become Even Weaker Link

Slow patching provides vulnerabilities to exploit. A lack of network segmentation allows unrestricted lateral movement. Yet a report surveying a year of penetration tests finds that passwords still top the list of what attackers use to compromise systems.

'Transparent Tribe' APT Group Deploys New Android Spyware for Cyber Espionage

The group, which has been around since at least 2013, has impacted thousands of organizations, mostly in India.

Deep Fake: Setting the Stage for Next-Gen Social Engineering

Humans are susceptible to normalcy bias, which may leave us vulnerable to disinformation that reinforces our beliefs.

US Warns of Ongoing BeagleBoyz Bank-Theft Operations

The North Korean operatives have attempted to steal more than $2 billion since 2015 in a series of ongoing campaigns.

Russian National Arrested for Conspiracy to Hack Nevada Company

The defendant allegedly planned to pay an employee $1 million to infect the company network with malware.

Cryptominer Found Embedded in AWS Community AMI

Researchers advise Amazon Web Services users running Community Amazon Machine Images to verify them for potentially malicious code.

MITRE Releases 'Shield' Active Defense Framework

Free knowledge base offers techniques and tactics for engaging with and better defending against network intruders.

MFA Mistakes: 6 Ways to Screw Up Multifactor Authentication

Fearful of messing up its implementation, many enterprises are still holding out on MFA. Here's what they need to know.

EDITORS' CHOICE

6 Signs Your Supply Chain Risk Just Shot Up

Risk levels are not steady states. Here are six indications that the danger posed by your supply chain is headed in the wrong direction.

The 'Shared Responsibility' Misnomer: Why the Cloud Continues to Confound

Under the "shared responsibility model," the security management of cloud offerings is split equally between the vendor and the customer. Easy enough, right?

NEW FROM THE EDGE

Election Security's Sticky Problem: Attackers Who Don't Attack Votes

If election defenders are protecting votes, and adversaries are attacking something else entirely, both sides might claim success, "Operation BlackOut" simulation shows.

7 New Cybersecurity Vulnerabilities That Could Put Your Enterprise at Risk