Dark Reading Weekly -- November 18, 2021

Is XDR Overhyped?

Security experts weigh in on the value and pitfalls of extended detection and response (XDR), offering consideration and advice on this growing new category.

The Troubling Rise of Initial Access Brokers

Criminal groups are ramping up use of IABs to get access to networks without having to deal with the initial reconnaissance and intrusion phases.

What Happens If Time Gets Hacked

Renowned hardware security expert raises alarm on the risk and dangers of cyberattackers targeting the current time-synchronization infrastructure.

Cybercriminals Increasingly Employ Crypto-Mixers to Launder Stolen Profits

Crypto-mixer services are set to grow as ransomware and other cybercriminal enterprises increasingly lean into cryptocurrency, new research shows.

PerSwaysion Phishing Campaign Continues to Be an Active Threat for Organizations

Research shows that multiple attack groups have been using the Microsoft file-sharing service - leveraging phishing kit for much longer than previously thought.

In Appreciation: Alan Paller

Alan Paller, founder of the famed SANS Institute, passed away on Nov. 9.

How to Hire — and Retain — Effective Threat Hunters

Key characteristics that should be evaluated include curiosity, disposition, and fit with the culture.

4 Considerations for Improving Cloud Security Hygiene

Mixing cloud security and maintenance practices with legacy enterprise approaches usually ends up shortchanging cloud hygiene. Here are some ways to remedy that.

How to Navigate the Mitigation of Deepfakes

Deepfakes are already several steps ahead of the technology that can detect and warn us about them.

Name That Toon: Cubicle for Four

Feeling creative? Submit your caption and our panel of experts will reward the winner with a $25 Amazon gift card.

Emotet Makes a Comeback

The popular Trojan has re-emerged on the scene several months after the botnet infrastructure behind it was disrupted by law enforcement.

SolarWinds Vulnerability Exploited in First Stage of Clop Ransomware Attacks

Russian cybercrime group known as T505 is targeting SolarWinds Server-U systems that haven't been patched for a remote code execution vulnerability fixed this summer.

FBI Attributes Abuse of Its Email Account to Software 'Misconfiguration'

A wave of phony emails from an FBI mail server originated from an issue with the agency's Law Enforcement Enterprise Portal.

How Data Breaches Affect the Enterprise