Dark Reading Daily -- August 23, 2018

It Takes an Average 38 Days to Patch a Vulnerability

Analysis of 316 million-plus security incidents uncovers most common types of real-world attacks taking place within in-production Web apps in the AWS and Azure cloud ecosystems.

Adobe Software at Center of Two Vulnerability Disclosures

Newly discovered Photoshop and Ghostscript vulnerabilities allow remote code execution.

DNC Reports Attempted Cyberattack on its Voter Database

FBI is investigating phony domain posing as Votebuilder.

The Votes Are In: Election Security Matters

Three ways to make sure that Election Day tallies are true.

Attackers Using 'Legitimate' Remote Admin Tool in Multiple Threat Campaigns

Researchers from Cisco Talos say Breaking Security's Remcos software allows attackers to fully control and monitor any Windows system from XP onward.

Wickr Adds New Censorship Circumvention Feature to its Encrypted App

Secure Open Access addresses void created by Google, Amazon decision to disallow domain fronting, company says.

New Insurance Product Adds Coverage for Cryptomining Malware Losses

Product also covers all forms of illicit use of business services, including toll fraud and unauthorized use of cloud services.

Hacker Unlocks 'God Mode' and Shares the 'Key'

A researcher proves that it's possible to break the most fundamental security on some CPUs.

Researchers Find New Fast-Acting Side-Channel Vulnerability

A group of researchers from Georgia Tech have discovered a method for pulling encryption keys from mobile devices without ever touching the phones, themselves.

Hackers Use Public Cloud Features to Breach, Persist In Business Networks

Attackers are abusing the characteristics of cloud services to launch and hide their activity as they traverse target networks.

EDITORS' CHOICE

7 Serious IoT Vulnerabilities

A growing number of employees have various IoT devices in their homes - where they're also connecting to an enterprise network to do their work. And that means significant threats loom.

Video from the DR News Desk at BHUSA

What a Forensic Analysis of 'Worst Voting Machine Ever' Turned Up

University of Copenhagen associate professor discusses what he found when he dug into some decommissioned WinVote voting machines.

The Biggest Cybersecurity Breaches of 2018 (So Far)