Dark Reading Daily -- December 23, 2021

Microsoft Customer Source Code Exposed via Azure App Service Bug

Researchers found an insecure default behavior in Azure App Service exposing source code of some customer applications deployed using "Local Git."

Nearly 50% of People Will Abandon Sites Prohibiting Password Reuse

A new study investigating consumer password use found 25% of online shoppers would abandon their carts of $100 if prompted to reset a password at checkout.

Log4j Reveals Cybersecurity's Dirty Little Secret

Once the dust settles on Log4j, many IT teams will brush aside the need for the fundamental, not-exciting need for better asset and application management.

Future of Identity-Based Security: All-in-One Platforms or Do-It-Yourself Solutions?

The functionality of all-in-one platforms is being deconstructed into a smorgasbord of services that can be used to develop bespoke end-user security procedures for specific work groups, lines of businesses, or customer communities.

CISA's New Log4j Scanner Aims to Find Vulnerable Apps

The open-sourced scanner was derived from scanners built by members across the open source community, CISA reports.

Preemptive Strategies to Stop Log4j and Its Variants

Zero trust is key to not falling victim to the next big vulnerability.

New Log4j Attack Vector Discovered

Meanwhile, Apache Foundation releases third update to logging tool in 10 days to address yet another flaw.

How Risky Is the Log4J Vulnerability?

Security teams around the world are on high alert dealing with the Log4j vulnerability, but how risky is it, really?

EDITORS' CHOICE

93% of Tested Networks Vulnerable to Breach, Pen Testers Find

Data from dozens of penetration tests and security assessments suggest nearly every organization can be infiltrated by cyberattackers.

LATEST FROM THE EDGE

Why We Need to Consolidate Digital Identity Management Before Zero Trust

Zero trust may be one of the hottest trends in cybersecurity, but just eliminating trust from networks isn’t enough to prevent successful organizational data breaches, says Wes Wright, CTO of Imprivata.

LATEST FROM DR TECHNOLOGY

How Do I Find My Servers With the Log4j Vulnerability?

This Tech Tip outlines how enterprises can use Canarytokens to find servers in their organization vulnerable to CVE-2021-44228.

How Data Breaches Affect the Enterprise