Dark Reading Daily -- November 18, 2021

Is XDR Overhyped?

Security experts weigh in on the value and pitfalls of extended detection and response (XDR), offering consideration and advice on this growing new category.

PerSwaysion Phishing Campaign Continues to Be an Active Threat for Organizations

Research shows that multiple attack groups have been using the Microsoft file-sharing service - leveraging phishing kit for much longer than previously thought.

Cyber Conflict Between US and Iran Heats Up

The United States, United Kingdom, and Australia warn attacks from groups linked to Iran are on the rise, while the Iranian government blames the US and Israel for an attack on gas pumps.

Belarus Linked to Big European Disinformation Campaign

EU officials and others previously had blamed Russia's intelligence operations for the so-called Ghostwriter campaign.

How to Navigate the Mitigation of Deepfakes

Deepfakes are already several steps ahead of the technology that can detect and warn us about them.

5 Things ML Teams Should Know About Privacy and the GDPR

Machine learning delivers plenty of benefits. But as the emerging technology gets applied more broadly, be careful about how you handle all the data used in the process.

Cybercriminals Contemplate 'Exploit-as-a-Service' Model

Researchers share their findings on the current zero-day market and how criminals' strategies may shift in the future.

The Troubling Rise of Initial Access Brokers

Criminal groups are ramping up use of IABs to get access to networks without having to deal with the initial reconnaissance and intrusion phases.

4 Considerations for Improving Cloud Security Hygiene

Mixing cloud security and maintenance practices with legacy enterprise approaches usually ends up shortchanging cloud hygiene. Here are some ways to remedy that.

Name That Toon: Cubicle for Four

Feeling creative? Submit your caption and our panel of experts will reward the winner with a $25 Amazon gift card.

EDITORS' CHOICE

Cybercriminals Increasingly Employ Crypto-Mixers to Launder Stolen Profits

Crypto-mixer services are set to grow as ransomware and other cybercriminal enterprises increasingly lean into cryptocurrency, new research shows.

LATEST FROM THE EDGE

Can I Have XDR Without EDR?

Yes, extended detection and response is possible without endpoint detection and response, but here's why having both is helpful.

LATEST FROM DR TECHNOLOGY

The Trouble With Automated Cybersecurity Defenses

While there's enormous promise in AI-powered tools and machine learning, they are very much a double-edged sword.

How Data Breaches Affect the Enterprise