Dark Reading Daily -- October 21, 2021

JavaScript Packing Found in More Than 25% of Malicious Sites

Obfuscation techniques are extremely prevalent, data shows, but they can't be used as a single indicator of compromise because legitimate websites use them.

Microsoft-Signed Rootkit Targets Gaming Environments in China

FiveSys is the second publicly known rootkit since June that attackers have managed to sneak past Microsoft's driver certification process.

Deepfake Audio Scores $35M in Corporate Heist

A combination of business email compromise and deepfake audio led a branch manager to transfer millions to scammers, in a case that serves as a warning to organizations.

The Ransomware Payment Dilemma: Should Victims Pay or Not?

It's time to steer the conversation away from whether payment bans should be implemented to how and when they should take effect.

Passwordless Is the Future … but What About the Present?

Password managers, single sign-on, and multifactor authentication each offers its own methodology and unique set of benefits — and drawbacks — to users.

Execs From Now-Defunct GigaTrust Arrested in $50M Fraud Scheme

Email endpoint security-as-a-service company founder and two others indicted in an elaborate financial fraud scheme.

Google: Phishing Campaign Targets YouTube Creators

The attackers behind the campaign, which distributes cookie theft malware, are attributed to actors recruited in a Russian-speaking forum.

10 Hot Red Team Tools Set to Hit Black Hat Europe

The slate of Arsenal presentations at Black Hat Europe is set to feature lots of low-cost and free goodies for offensive security pros.

(ISC)² Plans Entry-Level Certification for Aspiring Security Pros

The certification aims to help new entrants to the security field with professional development and career paths early on.

From Help Desk to Head of SOC: Building a Cybersecurity Career on Empathy and Candor

Why a passion for helping people is key to delivering effective cybersecurity solutions.

EDITORS' CHOICE

Damages Escalate Rapidly in Multiparty Data Breaches

Analysis of the top-50 multiparty attacks over the past decade finds that nation-state-linked hackers focused on disruption and using stolen credentials cause the most damage.

LATEST FROM THE EDGE

Removing Friction for the Enterprise With Trusted Access

Our work lives are supposed to be simpler and easier because of technology. At least that’s the promise.

LATEST FROM DR TECHNOLOGY

Proposed HTTPA Protocol Uses TEEs to Secure the Web

Intel researchers describe how Trusted Execution Environments can enhance HTTPS and boost web security.

How Enterprises are Attacking the Cybersecurity Problem