Dark Reading Daily -- June 09, 2021

Microsoft Patches 6 Zero-Days Under Active Attack

The June 2021 Patch Tuesday fixes 50 vulnerabilities, six of which are under attack and three of which were publicly known at the time of disclosure.

Phished Account Credentials Mostly Verified in Hours

Almost two-thirds of all phished credentials are verified by attackers within a day and then used in a variety of schemes, including business email compromise and targeting other users with malicious code.

Cyber Resilience: The Emerald City of the Security World

Small and midsize businesses and managed service providers must use their heart, brain, and courage as they follow the Yellow Brick Road to cyber resilience.

An Answer to APP Scams You Can Bank On

Financial institutions' usual fraud-detection methods can't detect most authorized push payment (APP) scams, putting customers and banks at risk.

How Employees Can Keep Their 401(k)s Safe From Cybercriminals

As retirement fund balances grow, cybercriminals are becoming more brazen in their efforts to deplete people's savings.

FBI Issued Encrypted Devices to Capture Criminals

A sting operation delivered devices into the hands of global criminals and used the intelligence gathered to stop drug crimes.

Colonial Pipeline CEO: Ransomware Attack Started via Pilfered 'Legacy' VPN Account

No multifactor authentication was attached to the stolen VPN password used by the attackers, Colonial Pipeline president & CEO Joseph Blount told a Senate committee today.

What the FedEx Logo Taught Me About Cybersecurity

Cyber threats are staring you in the face, but you can't see them.

Data Breaches Drive Higher Loan Interest Rates

Businesses that suffer a security breach may not see their stock price tumble, but they may pay higher rates for loans and be forced to provide collateral, researchers report.

Microsoft 365: Most Common Threat Vectors & Defensive Tips

Security pros discuss the most typical ways attackers leverage Microsoft 365 and share their guidance for defenders.

Welcome to the New Workplace

The pandemic has changed the landscape in which security pros work. Here are five ways how.

EDITORS' CHOICE

First Known Malware Surfaces Targeting Windows Containers

Siloscape is designed to create a backdoor in Kubernetes clusters to run malicious containers.

Cyber Athletes Compete to Form US Cyber Team

Here's how security pros can showcase value to future employers: a field of friendly strife to measure their aptitude against competitors.

LATEST FROM THE EDGE

How Can I Test the Security of My Home-Office Employees' Routers?

From the most accurate to the most practical, here are a few ways to ensure both employees and organizations are protected from risk.

The State of Cybersecurity Incident Response