Dark Reading Daily -- June 16, 2021

Microsoft Disrupts Large-Scale BEC Campaign Across Web Services

Attackers had used the cloud-based infrastructure to target mailboxes and add forwarding rules to learn about financial transactions.

Thousands of VMware vCenter Servers Remain Open to Attack Over the Internet

Three weeks after company disclosed two critical vulnerabilities in the workload management utility, many organizations have not patched the technology yet, security vendor says.

Security Experts Scrutinize Apple, Amazon IoT Networks

Both companies have done their due diligence in creating connected-device networks, but the pervasiveness of the devices worries some security researchers.

What Industrial Control System Vulnerabilities Can Teach Us About Protecting the Supply Chain

Older technologies used in industrial and critical infrastructure leave the sector highly vulnerable to attack, but organizations can take steps to better protect themselves.

How Does the Government Buy Its Cybersecurity?

The federal government is emphasizing cybersecurity regulation, education, and defense strategies this year.

Andariel Group Targets South Korean Entities in New Campaign

Andariel, designated as a sub-group of the Lazarus Group APT, has historically targeted South Korean organzations.

Deloitte Buys Terbium Labs to Expand Threat Intel Capabilities

Terbium Labs' products and services will become part of Deloitte's Detect & Respond lineup, the company confirms.

Required MFA Is Not Sufficient for Strong Security: Report

Attackers and red teams find multiple ways to bypass poorly deployed MFA in enterprise environments, underscoring how redundancy and good design are still required.

What to Know About Updates to the PCI Secure Software Standard

New requirements add 50 controls covering five control objectives. Here's a high-level look at each objective.

Ransomware Is Not the Problem

Arbitrarily powerful software -- applications, operating systems -- is a problem, as is preventing it from running on enterprise systems.

EDITORS' CHOICE

11 Cybersecurity Vendors to Watch in 2021

The cybersecurity landscape continues to spawn new companies and attract new investments. Here is just a sampling of what the industry has to offer.

Know Thy Enemy: Fighting Half-Blind Against Ransomware Won't Work

We lack reliable, representative, actionable data about ransomware's actual scope, scale, and impact. The Ransom Incident Response Network could change that.

LATEST FROM THE EDGE

How President Biden Can Better Defend the US From Russian Hacks

Wilson Center cybersecurity expert Meg King pinpoints five ambitious steps the administration should take, including a comprehensive national data breach notification protocol.

The State of Cybersecurity Incident Response