Dark Reading Daily -- September 10, 2020

Meet the Middlemen Who Connect Cybercriminals With Victims

An analysis of initial access brokers explains how they break into vulnerable organizations and sell their access for up to $10,000.

Ransomware Attacks Disrupt School Reopenings

A flurry of recent attacks is complicating attempts to deliver classes online at some schools in different parts of the country.

Legality of Security Research to be Decided in US Supreme Court Case

A ruling that a police officer's personal use of a law enforcement database is "hacking" has security researchers worried for the future.

Why We Need to Pay Attention to Attacks on the Smart-Built Environment

Are attacks on IoT physical security devices real or just theoretical? Why professionals need to be aware of the real-life examples in an effort to guard against future attacks on their own businesses.

Multiparty Encryption Allows Companies to Solve Security-Data Conundrum

An interdisciplinary research team constructs a way for companies to share breach data without revealing specific details that could exposes businesses to legal risk.

Top 5 Identity-Centric Security Imperatives for Newly Minted Remote Workers

In the wake of COVID-19, today's remote workforce is here to stay, at least for the foreseeable future. And with it, an increase in identity-related security incidents.

Secureworks to Buy Delve Laboratories for Vulnerability Management

Delve's automated vulnerability platform provides insight on high-risk vulnerabilities across an organization's network, endpoints, and cloud.

Inova Suffers Third-Party Data Breach

The breach occurred as part of a ransomware attack against service provider Blackbaud.

Next-Gen Firewalls 101: Not Just a Buzzword

In a rare twist, "next-gen" isn't just marketing-speak when it comes to next-gen firewalls, which function differently than traditional gear and may enable you to replace a variety of devices.

VPNs: The Cyber Elephant in the Room

While virtual private networks once boosted security, their current design doesn't fulfill the evolving requirements of today's modern enterprise.

How CISOs Can Play a New Role in Defining the Future of Work

Rather than just reacting to security issues in the COVID-19 era, CISOs are now in a position to be change agents alongside their C-suite peers.

EDITORS' CHOICE

Post-COVID-19 Cybersecurity Spending Update

Security spending growth will slow in 2020, but purse strings are looser than for other areas of IT.

7 Cybersecurity Priorities for Government Agencies & Political Campaigns

As election season ramps up, organizations engaged in the process must strengthen security to prevent chaos and disorder from carrying the day. Here's how.

NEW FROM THE EDGE

Our Diversity Program Isn't Working. What Are We Doing Wrong?

Assuming that you're truly stuck, here are some things to consider.

Chart: Does Lack of Diversity Impact the Skills Shortage?

Yes, according to 21% of security pros who participated in the 2020 Black Hat Attendee Survey.

Gone in a Flash

Behold, the pitfalls of portable hardware.

7 New Cybersecurity Vulnerabilities That Could Put Your Enterprise at Risk