Dark Reading Daily -- March 13, 2018

Malware Leveraging PowerShell Grew 432% in 2017

Cryptocurrency mining and ransomware were other major threats.

Chinese APT Backdoor Found in CCleaner Supply Chain Attack

Avast discovers ShadowPad tool for use in apparent planned third stage of the targeted attack campaign.

FlawedAmmyy RAT Campaign Puts New Spin on Old Threat

A remote access Trojan, in use since 2016, has a new tactic: combining zip files with the SMB protocol to infect target systems.

IoT Product Safety: If It Appears Too Good to Be True, It Probably Is

Proposed new connected-product repair laws will provide hackers with more tools to make our lives less secure.

Asia's Security Leaders Feel Underprepared for Future Threats: Report

A new study highlights major concerns of cybersecurity leaders in Asia, where most fear critical infrastructure attacks, advanced threats, and social engineering.

CyberArk Buys Vaultive for Privileged Account Security Technology

The account security firm will use Vaultive's tech to protect privileged users at heightened risk for cyberattacks.

Georgia Man Pleads Guilty to Business Email Compromise Attacks

Kerby Rigaud has pleaded guilty to using BEC attacks in attempts to steal more than $1 million from US businesses.

Millions of Office 365 Accounts Hit with Password Stealers

Phishing emails disguised as tax-related alerts aim to trick users into handing attackers their usernames and passwords.

How Guccifer 2.0 Got 'Punk'd' by a Security Researcher

Security expert and former Illinois state senate candidate John Bambenek details his two months of online interaction with the 'unsupervised cutout' who shared with him more stolen DCCC documents.

Pragmatic Security: 20 Signs You Are 'Boiling the Ocean'

Ocean-boiling is responsible for most of the draconian, nonproductive security policies I've witnessed over the course of my career. Here's why they don't work.

EDITORS' CHOICE

7 University-Connected Cyber Ranges to Know Now

Universities are beginning to add cyber ranges to the facilities for teaching cyber security to students and professionals.

Disappearing Act: Dark Reading Caption Contest Winners

A standout field with hysterical puns about security policies, Meltdown, Amazon Web Services, and the right to be forgotten. And the winner is ...

How to Cope with the IT Security Skills Shortage