Dark Reading Daily -- March 25, 2020

How Attackers Could Use Azure Apps to Sneak into Microsoft 365

Researchers warn Microsoft 365 account holders to pay attention to unknown applications that request permissions.

Cybercriminals' Promises to Pause During Pandemic Amount to Little

As pandemic worsens, online profiteering -- from fraudsters to ransomware operators to cybercriminal hacking -- continues unabated, despite some promises from the underground.

Automated Tools Make Cyberattacks Easier to Pull Off

Gone are the days when threat actors had to actually spend time and effort planning and developing an attack on their own, Recorded Future says.

How to Secure Your Kubernetes Deployments

As more companies shift their software to a microservices-based architecture and orchestrate their containerized applications in Kubernetes, distributed security controls become a must.

Vulnerability Management Isn't Just a Numbers Game

Attackers work 24/7, so you have to be vigilant around the clock. Time for some game theory.

Malware Found Hidden in Android Utility Apps, Children's Games

The 'Tekya' malware, as researchers call it, is designed to imitate the user's actions to click advertisements.

New APT Targets Middle Eastern Victims

The new malware, dubbed "Milum," can take control of industrial devices.

200M Records of US Citizens Leaked in Unprotected Database

Researchers have not determined who owns the database, which was one of several large exposed instances disclosed this week.

What Cybersecurity Pros Really Think About Artificial Intelligence

While there's a ton of unbounded optimism from vendor marketing and consultant types, practitioners are still reserving a lot of judgment.

How Security Leaders at Starbucks and Microsoft Prepare for Breaches

Executives discuss the security incidents they're most worried about and the steps they take to prepare for them.

EDITORS' CHOICE

8 Infosec Page-Turners for Days Spent Indoors

Stuck inside and looking for a new read? Check out these titles written by security practitioners and reporters across the industry.

From Zero to Hero: CISO Edition

It's time for organizations to realize that an empowered CISO can effectively manage enterprise risk and even grow the business along the way.

NEW FROM THE EDGE

Three Ways Your BEC Defense Is Failing & How to Do Better

Business email compromises cost the economy billions of dollars. Experts have advice on how to stop them from hitting you for millions at a pop.

6 Emerging Cyber Threats That Enterprises Face in 2020