Dark Reading Daily -- January 12, 2022

Microsoft Kicks Off 2022 With 96 Security Patches

Nine of the Microsoft patches released today are classified as Critical, 89 are Important, and six are publicly known.

Cloud Apps Replace Web as Source for Most Malware Downloads

Two-thirds of all malware distributed to enterprise networks last year originated from cloud apps such as Google Drive, OneDrive, and numerous other cloud apps, new research shows.

Remotely Exploitable NetUSB Flaw Puts Millions of Devices at Risk

A vulnerability in a third-party component used by many networking firms puts consumer and small business routers at risk for remote exploitation.

Businesses Suffered 50% More Cyberattack Attempts per Week in 2021

The rise — partly due to Log4j — helped boost cyberattack attempts to an all-time high in Q4 2021, new data shows.

Why Security Awareness Training Should Begin in the C-Suite

It's not just the rights and privileges that CXOs have on the network. They can also set an example of what good security hygiene looks like.

Why the Insider Threat Will Motivate Cyber and Physical Teams to Collaborate More Than Ever in 2022

It's hard to have a crystal ball in the world of security, but if one were to make a safe prediction, it's this: Organizations will need to further integrate their cybersecurity and physical security functions throughout 2022 and beyond. So argues former chief psychologist for the US Secret Service, Dr. Marisa Randazzo, who now heads up Ontic's Center of Excellence.

FBI, NSA & CISA Issue Advisory on Russian Cyber Threat to US Critical Infrastructure

Advisory explains how to detect, respond to, and mitigate cyberattacks from Russian state-sponsored hacking groups.

Details Released on SonicWall Flaws in SMA-100 Devices

The most serious of the five vulnerabilities disclosed today can lead to unauthenticated remote code execution on affected devices.

Breach Response Shift: More Lawyers, Less Cyber-Insurance Coverage

Companies are more likely to rely on outside attorneys to handle cyber response in order to contain potential lawsuits. Meanwhile, cyber-insurance premiums are rising but covering less.

The Evolution of Patch Management: How and When It Got So Complicated

In the wake of WannaCry and its ilk, the National Vulnerability Database arose to help security organizations track and prioritize vulnerabilities to patch. Part 1 of 3.

Name That Edge Toon: In Your Face!

Come up with a clever caption, and our panel of experts will reward the winner with a $25 Amazon gift card.

EDITORS' CHOICE

No Significant Intrusions Related to Log4j Flaw Yet, CISA Says

But that could change anytime, officials warn, urging organizations to prioritize patching against the critical remote code execution flaw.

LATEST FROM THE EDGE

Let's Play! Raising the Stakes for Threat Modeling With Card Games

On a recent Friday night, three security experts got together to play custom games that explore attack risks in an engaging way.

LATEST FROM DR TECHNOLOGY

Enterprise Security at CES 2022 Marked by IoT, Biometrics, and PC Chips

Amid the onslaught of mostly consumer-oriented announcements in Las Vegas, a few key items pertaining to enterprise security emerged.

How Enterprises Are Assessing Cybersecurity Risk in Today's Environment