Dark Reading Weekly -- November 12, 2020

Malware Hidden in Encrypted Traffic Surges Amid Pandemic

Zscaler says attacks involving the use of SSL/TLS encryption jumped 260% in the first nine months of 2020 compared to the same period last year.

Microsoft Patches Windows Kernel Flaw Under Active Attack

This month's Patch Tuesday addressed a Windows zero-day in a release of 112 vulnerabilities, 17 of which are critical.

New Brazilian Banking Trojan Targets Mobile Users in Multiple Countries

Ghimob is a full-fledged spy in your pocket, Kaspersky says.

Like the Energizer Bunny, Trickbot Goes On and On

Recent efforts to take down the virulent botnet have been largely -- but not entirely -- successful.

New Gitpaste-12 Botnet Exploits 12 Known Vulnerabilities

Researchers discover a new worm and botnet dubbed Gitpaste-12 for its ability to spread via GitHub and Pastebin.

How Hackers Blend Attack Methods to Bypass MFA

Protecting mobile apps requires a multilayered approach with a mix of cybersecurity measures to counter various attacks at different layers.

Preventing and Mitigating DDoS Attacks: It's Elementary

Following a spate of cyberattacks nationwide, school IT teams need to act now to ensure their security solution makes the grade.

How COVID-19 Changed the VC Investment Landscape for Cybersecurity Companies

What trends can startups and investors expect to see going forward?

NSS Labs' Abrupt Shutdown Leaves Many Unanswered Questions

Former execs and employees share some insights into the testing firm's shutdown. What does it mean for the future of security product testing?

Bug Bounty Hunters' Pro Tips on Chasing Vulns & Money

From meditation to the right mindset, seasoned vulnerability researchers give their advice on how to maximize bug bounty profits and avoid burnout.

The Oracle-Walmart-TikTok Deal Is Not Enough

The social media deal raises issues involving data custodianship and trusted tech partnerships.

EDITORS' CHOICE

7 Online Shopping Tips for the Holidays

The holidays are right around the corner, and that means plenty of online shopping. These tips will help keep you safe.

How to Avoid Getting Killed by Ransomware

Using a series of processes, infosec pros can then tap automated data hygiene to find and fix files that attackers key in on.

LATEST FROM THE EDGE

9 New Tactics to Spread Security Awareness

Employees are often your first line of security defense when the bad guys come calling -- providing your workers are properly trained. Security leaders share how they're raising awareness.

How to Measure and Reduce Cybersecurity Risk in Your Organization