Dark Reading Daily -- April 22, 2020

Microsoft Proposes Privacy Controls for COVID-19 Contact Tracking, Tracing

As governments broaden use of digital technologies to stem pandemic, sensitive health and location data need to be protected, company says.

Attackers Aim at Software Supply Chain with Package Typosquatting

Attackers seed Ruby Gems repository with more than 760 malicious packages using names just a bit different than the standard code libraries.

Automated Bots Are Increasingly Scraping Data & Attempting Logins

The share of bot traffic to online sites declines, but businesses are seeing an overall increase in automated scraping of data, login attempts, and other detrimental activity.

Researchers Use Microsoft Terminal Services Client in New Attack Method

The technique would enable attackers to run malicious code via Remote Desktop Protocol using DLL side-loading to bypass security controls.

7 Steps to Avoid the Top Cloud Access Risks

Securing identities and data in the cloud is challenging, but a least-privilege access approach helps.

Work-from-Home Exposes Already-Infected Machines in 50K US Organizations

Researchers find massive spike in infected enterprises worldwide.

Viral WhatsApp Scam Promises Free Streaming Services

Cybercriminals capitalize on the popularity of media and entertainment to target consumers looking for at-home activities.

Terahash Buys L0phtCrack in Password Merger

The acquisition brings password cracking and password auditing capabilities together in a single company.

Which InfoSec Jobs Will Best Survive a Recession?

With COVID-19 making a mess of the global economy, companies are seeking to cut corners - and some boardrooms still see security as a "cost center." Are infosec careers vulnerable now?

4 Cybersecurity Lessons from the Pandemic

An epidemiologist-turned-CTO describes the parallels between the spread of a computer virus and the real-world coronavirus.

Slack's Incoming Webhooks Can Be Weaponized in Phishing Attacks

Researchers report how attackers could weaponize a feature in the Slack collaboration platform to access corporate data and messages.

EDITORS' CHOICE

10 Standout Security M&A Deals from Q1 2020

The first quarter of 2020 brought investments in enterprise IoT and endpoint security, as well as billion-dollar investments from private equity firms.

Is COVID-19 Intensifying the Need for Security Staffing?

Overall, security practitioners should find themselves in a better working situation than many other professionals. However, we are not immune.

NEW FROM THE EDGE

Cybersecurity Home-School: The Robot Project

This fun project can teach your homebound children and teens about cybersecurity (and keep them occupied for at least a little while).

How Can I Help My Users Spot Disinformation?

A combination of clever tools, good education, and better mindfulness might keep users from being manipulated.

6 Emerging Cyber Threats That Enterprises Face in 2020