Dark Reading Daily -- April 06, 2022

Microsoft Details New Security Features for Windows 11

Security features to come include a TPM-like security processor for protecting artifacts that a computer uses during the secure boot-up process, as well as a control for blocking unsigned and untrusted apps.

Developers Increasingly Prioritize Secure Coding

But "old habits are hard to break," with 48% of developers still shipping code with vulnerabilities.

FIN7 Morphs into a Broader, More Dangerous Cybercrime Group

Mandiant has now tied the group to at least eight unattributed clusters of activity targeting organizations across various industries and regions.

'Human Behavior' Security Startup Nets $7M in Seed

Nudge Security plans a general launch of its cloud-based service later this year.

What We Can Learn From Lapsus$ Techniques

The group is targeting the biggest weak spot in most security postures: finding anomalous behavior by authorized entities.

How to Prepare for Cyber Threats During the Russian Invasion of Ukraine

Remain calm, maintain control, and triage responses appropriately to ensure that the organization can remain resilient against threats during this crisis and through others to come.

Apple's Zero-Day Woes Continue

Two new bugs in macOS and iOS disclosed this week add to the growing list of zero-days the company has rushed to patch over the past year.

Smart Cities: Secure by Design? It Takes a Village

Smart-city security breaches have potentially very serious consequences — they can be economically devastating and even life-threatening, if handled wrong.

Security's Life Cycle Isn't the Developers' Life Cycle

Whether it's PCI-DSS, SSDLC, or GDPR, the criteria that security standards expect businesses to uphold are neither realistic or feasible.

EDITORS' CHOICE

Millions of Installations Potentially Vulnerable to Spring Framework Flaw

Internet scan indicates hundreds of thousands of vulnerable installations, while data from the major Java repository suggests millions, firms say.

LATEST FROM THE EDGE

Name That Edge Toon: In Deep Water

Come up with a clever caption, and our panel of experts will reward the winner with a $25 Amazon gift card.

LATEST FROM DR TECHNOLOGY

How IP Data Can Help Security Professionals Protect Their Networks

Beefing up security requires a combination of forensic efforts and proactive mitigation. IP context aids both.

How Enterprises Are Securing the Application Environment