Dark Reading Daily -- February 09, 2021

Malicious Code Injected via Google Chrome Extension Highlights App Risks

An open source plug-in purportedly introduced tracking and malicious download code to infect nearly 2 million users, reports say.

Emotet Takedown: Short-Term Celebration, Long-Term Concerns

Security researchers examine how and when Emotet's operators may resurface, and the threats that could evolve in the meantime.

(Sponsored Article) Manage the Cloud Permissions Gap to Achieve Zero Trust

The Cloud Permissions Gap exposes organizations to highly exploitable risk, combined with the inability to implement and manage Zero-Trust policies.

Hidden Dangers of Microsoft 365's Power Automate and eDiscovery Tools

Attackers are using legitimate enterprise tools to execute attacks and carry out malicious actions. Security teams must take action now.

Hacker Raised Chemical Settings at Water Treatment Plant to Dangerous Levels

Remote access interface breached at Florida utility; attacker detected raising level of sodium hydroxide in water.

Android App Infects Millions of Devices With a Single Update

The popular Barcode Scanner app, which as been available on Google Play for years, turned malicious with one software update.

Microsoft Says It's Time to Attack Your Machine-Learning Models

With access to some training data, Microsoft's red team recreated a machine-learning system and found sequences of requests that resulted in a denial-of-service.

How Recruiting Women Can Help Solve Security's Biggest Problems

We can solve cybersecurity's longstanding talent gap by bringing more women into the field.

Ransomware Payoffs Surge by 311% to Nearly $350 Million

Payments to ransomware gangs using cryptocurrency more than quadrupled in 2020, with less than 200 cryptocurrency wallets receiving 80% of funds.

EDITORS' CHOICE

6 Open Source Tools for Your Security Team

Open source tools can be great additions to your cloud security arsenal. Here are a half-dozen to get you started.

Cybercrime Goes Mainstream

Organized cybercrime is global in scale and the second-greatest risk over the next decade.

LASTEST FROM THE EDGE

What's the Difference Between 'Observability' and 'Visibility' in Security?

To drive holistic security success, we have to start with the interlinking of visibility and observability.

2021 Top Enterprise IT Trends