Dark Reading Weekly -- February 04, 2021

Follow Dark Reading:

February 04, 2021

LATEST SECURITY NEWS & COMMENTARY

Interview With a Russian Cybercriminal

A LockBit ransomware operator shared with researchers why he became involved in cybercrime, how he chooses victims, and what's in his toolbox.

6 Cybersecurity Start-Up Trends to Track

The pandemic took a bite out of funding deals, but cybersecurity start-ups fared better than many other industries.

Concerns Over API Security Grow as Attacks Increase

Some 66% of organizations say they have slowed deploying an app into production because of API security concerns.

Agent Tesla Upgrades with New Delivery & Evasion Tactics

A new version of the remote access Trojan targets Microsoft Anti-Malware Software Interface to bypass endpoint detection.

Attackers Continue to Nibble at Apple's iOS Security

For the second time in less than three months, Apple has patched vulnerabilities in the software for iPhone and iPad, warning that the issues are already being targeted by attackers.

Ransomware Payoffs Surge by 311% to Nearly $350 Million

Payments to ransomware gangs using cryptocurrency more than quadrupled in 2020, with less than 200 cryptocurrency wallets receiving 80% of funds.

Increase in Physical Security Incidents Adds to IT Security Pressures

A new study shows that many organizations have changed their physical security strategies to address new concerns since the COVID-19 outbreak.

Strengthening Zero-Trust Architecture

Organizations that want to stay ahead of cybercriminals will find that going beyond user trust and device trust is critical for outwitting their adversaries.

How Recruiting Women Can Help Solve Security's Biggest Problems

We can solve cybersecurity's longstanding talent gap by bringing more women into the field.

SonicWall Confirms Zero-Day Vulnerability

The confirmation arrives as researchers with NCC Group detect a SonicWall zero-day flaw under active attack.

Data on 1.4 Million Washington State Residents Breached

Unemployment data exposed via third-party software attack.

FTC: ID Theft Doubled in 2020

The Federal Trade Commission said a surge in reports of identity theft occurred amid the COVID-19 pandemic.

MORE NEWS & COMMENTARY


HOT TOPICS
2020 Marked a Renaissance in DDoS Attacks Amid the global pandemic, cybercriminals ramped up use of one of the oldest attack techniques around. SolarWinds Attackers Spent Months in Corporate Email System: Report SolarWinds' CEO says evidence indicates attackers lurked in the company's Office 365 email system for months ahead of the attack. RF Enables Takeover of Hostile Drones Tempting as it may be to blast drones out of the sky, a less aggressive approach may yield better data about attackers - and keep bystanders safe. MORE

EDITORS' CHOICE

Patch Imperfect: Software Fixes Failing to Shut Out Attackers

Incomplete patches are allowing attackers to continue exploiting the same vulnerabilities, reducing the cost to compromise.

Security in a Complex World

Innovation and complexity can co-exist; the key is to use innovation to make ever-expanding complexity comprehensible and its effects predictable.

LATEST FROM THE EDGE

What I Wish I Knew at the Start of My InfoSec Career

Security pros identify lessons learned that impact how they view infosec today.

Tech Resources

ACCESS TECH LIBRARY NOW

Optimizing App Performance in the Cloud
Today's hybrid cloud architectures render traditional application performance troubleshooting and monitoring methods obsolete. Compounding matters, the wide-scale use of microservices and containers, and the adoption of continuous integration (CI) and continuous delivery (CD) principles mean constant change making it increasingly ...
Nip Ransomware in the FUD: Detecting Attacks Pre-Encryption
In this webinar you'll get best practices and methodologies that organizations can use to detect threats, specific examples of actual compromises by ransomware operators, and guidance on how to identify opportunities for detecting malicious behavior during the post-compromise, pre-encryption phase.

FEATURED REPORTS

CURRENT ISSUE

2020: The Year in Security
DOWNLOAD THIS ISSUE	SUBSCRIBE NOW
BACK ISSUES \| MUST READS \| TECH DIGEST

PRODUCTS & RELEASES

Cisco AppDynamics Delivers Solution for Strengthening Security Posture Against Threats While Achieving Peak Application Performance

DH2i Pre-Pandemic State of Virtual Private Networks (VPNs) Survey Reveals Inadequate Security Is Number One VPN Pain Point

Uniphore Unveils Technologies to Strengthen Both Agent and Customer Experiences in the Contact Center

Berryville Institute of Machine Learning (BIML) Gets $150,000 Open Philanthropy Grant

Fortinet Announces AI-powered XDR for Fully Automated Threat Detection, Investigation, and Response

MORE PRODUCTS & RELEASES

Dark Reading Weekly
-- Published By Dark Reading
Informa Tech
303 Second St., Suite 900 South Tower, San Francisco, CA 94107

To update your profile, change your e-mail address, or unsubscribe, click here.

To opt-out of any future Dark Reading Weekly Newsletter emails, please respond here.

Thoughts about this newsletter? Give us feedback.

Keep This Newsletter Out Of Your SPAM Folder
Don't let future editions go missing. Take a moment to add the newsletter's address to your anti-spam white list:

If you're not sure how to do that, ask your administrator or ISP. Or check your anti-spam utility's documentation.

We take your privacy very seriously. Please review our Privacy Statement.