Dark Reading Weekly -- December 03, 2020

Follow Dark Reading:

December 03, 2020

LATEST SECURITY NEWS & COMMENTARY

Malicious or Vulnerable Docker Images Widespread, Firm Says

A dynamic analysis of the publicly available images on Docker Hub found that 51% had critical vulnerabilities and about 6,500 of the 4 million latest images could be considered malicious.

Google Security Researcher Develops 'Zero-Click' Exploit for iOS Flaw

A new patched memory corruption vulnerability in Apple's AWDL protocol can be used to take over iOS devices that are in close proximity to an attacker.

Look Beyond the 'Big 5' in Cyberattacks

Don't ignore cyber operations outside US and European interests, researcher says. We can learn a lot from methods used by attackers that aren't among the usual suspects.

Former NSS Labs CEO Launches New Security Testing Organization

Member-based CyberRatings.org to offer free and tiered paid access to tested security product and services ratings.

Cybersecurity in the Biden Administration: Experts Weigh In

Security pros and former government employees share their expectations and concerns for the new administration - and their hope for a "return to normal."

Open Source Flaws Take Years to Find But Just a Month to Fix

Companies need to embrace automation and dependency tracking to keep software secure, GitHub says in its annual security report.

Latest Version of TrickBot Employs Clever New Obfuscation Trick

The malware takes advantage of how the Windows command line interpreter works to try and slip past anti-detection tools, Huntress Labs says.

From FUD to Fix: Why the CISO-Vendor Partnership Needs to Change Now

CISOs and their staffs are up against too many systems, screens, and alerts, with too few solutions to effectively address pain points.

Manchester United Cyberattack Highlights Controversy in Paying Ransomware Attackers

The Premier League English football (soccer) club team is reportedly being held to ransom by cyberattackers. Manchester United may face a difficult decision: whether to pay a ransom for release of its stolen data.

MORE NEWS & COMMENTARY


HOT TOPICS
Inside North Korea's Rapid Evolution to Cyber Superpower Researchers examine North Korea's rapid evolution from destructive campaigns to complex and efficient cyber operations. How Ransomware Defense Is Evolving With Ransomware Attacks As data exfiltration threats and bigger ransom requests become the norm, security professionals are advancing from the basic "keep good backups" advice. Baltimore County Public Schools Closed Due to Ransomware Attack The incident struck the day before Thanksgiving and interfered with online classes for some 115,000 students, officials report. MORE

EDITORS' CHOICE

2020 Cybersecurity Holiday Gift Guide for Kids

Grab some wrapping paper: These STEM toys and games are sure to spark creativity and hone coding and logic skills among a future generation of cybersecurity pros.

Why I'd Take Good IT Hygiene Over Security's Latest Silver Bullet

Bells and whistles are great, but you can stay safer by focusing on correct configurations, posture management, visibility, and patching.

LATEST FROM THE EDGE

Loyal Employee ... or Cybercriminal Accomplice?

Can the bad guys' insider recruitment methods be reverse-engineered to reveal potential insider threats? Let's take a look.

Tech Resources

ACCESS TECH LIBRARY NOW

Data Protection 101 - 12/10 @ 11am EST
This virtual event spotlights expert insights for ensuring that data is available and secured wherever and whenever a business needs it most--whether in the cloud, across corporate endpoints, or on unmanaged devices--and that its policies align with a fast-changing regulatory ...
Automating Security Functions in Your Enterprise
A shortage of skilled IT security professionals has given rise to a whole new class of technology and practices designed to automate repetitive and time-consuming tasks in security operations. But which tasks can enterprises safely automate? In this webinar, top ...

FEATURED REPORTS

CURRENT ISSUE

2021 Top Enterprise IT Trends
DOWNLOAD THIS ISSUE	SUBSCRIBE NOW
BACK ISSUES \| MUST READS \| TECH DIGEST

PRODUCTS & RELEASES

Kaspersky Finds SMBs That Proactively Disclose Breaches Experience 40% Less Financial Damage

New Net Technologies (NNT) Launches Change Tracker for Cloud and Container Environments

Operation Falcon: INTERPOL and Group-IB Identify Nigerian BEC Ring Members

Philips Expands Its Healthcare Customer Services Portfolio with Integrated Cybersecurity Services

CompTIA PenTest+ Approved by U.S. Department of Defense

MORE PRODUCTS & RELEASES

Dark Reading Weekly
-- Published By Dark Reading
Informa Tech
303 Second St., Suite 900 South Tower, San Francisco, CA 94107

To update your profile, change your e-mail address, or unsubscribe, click here.

To opt-out of any future Dark Reading Weekly Newsletter emails, please respond here.

Thoughts about this newsletter? Give us feedback.

Keep This Newsletter Out Of Your SPAM Folder
Don't let future editions go missing. Take a moment to add the newsletter's address to your anti-spam white list:

If you're not sure how to do that, ask your administrator or ISP. Or check your anti-spam utility's documentation.

We take your privacy very seriously. Please review our Privacy Statement.