Dark Reading Daily -- May 14, 2020

How Unconventional Professional Backgrounds Can Strengthen a Cybersecurity Team

Getting over the cybersecurity skills gap takes creativity, flexibility, and a willingness to go "off-script" when it comes to picking out candidates.

Attackers Routinely Use Older Vulnerabilities to Exploit Businesses, US Cyber Agency Warns

Security issues in Microsoft products dominate the US government's top 10 list of commonly exploited vulnerabilities, but Apache Struts, Adobe Flash, and Drupal are also routinely targeted.

Organizations Conduct App Penetration Tests More Frequently - and Broadly

Compliance is no longer the primary motivator. AppSec is, Cobalt.io says.

New Cyber-Espionage Framework Dubbed Ramsay

The framework is designed to collect and exfiltrate sensitive documents from air-gapped networks.

More Tips for Staying Safe While Working from Home

While some users are up to speed with the WFH protocol, it's worth adding a few more items to your security checklist.

Ransomware, Data Breach Follow Phishing Attack at Magellan Health

The healthcare company has informed affected employees of a data breach on a single corporate server.

CyberArk Acquires Idaptive for Identity-as-a-Service Tech

The $70 million deal is intended to help CyberArk strengthen its portfolio with secure and SaaS-based identity management.

As Remote Work Becomes the Norm, Security Fight Moves to Cloud, Endpoints

A majority of firms expect to keep more employees working remotely post-pandemic, forcing businesses to undertake more comprehensive digital and cloud transformations.

Thunderbolt Vulnerabilities Could Threaten Millions of PCs

Attackers with physical access to targeted machines could exploit these flaws to access and copy data within minutes, researchers say.

Companies Struggle for Effective Cybersecurity

The money companies are spending on cybersecurity tools doesn't necessarily result in better security, a new survey shows.

EDITORS' CHOICE

6 Free Cybersecurity Training and Awareness Courses

Most are designed to help organizations address teleworking risks related to COVID-19 scams.

The Problem with Automating Data Privacy Technology

Managing complex and nuanced consumer rights requests presents a unique challenge for enterprises in today's regulated world of GDPR and CCPA. Here's why.

NEW FROM THE EDGE

Biometrics in the Great Beyond

A thumbprint may be a good authentication factor for the living, but are you prepared to access mission-critical data and devices after an employee's death?

How Cybersecurity Incident Response Programs Work (and Why Some Don't)