Dark Reading Weekly -- January 11, 2018

Microsoft Confirms Windows Performance Hits with Meltdown, Spectre Patches

Windows servers will see biggest degradation, as will Windows 7 and 8 client machines, Microsoft said.

'Shift Left': Codifying Intuition into Secure DevOps

Shifting left is more than a catchy phrase. It's a mindset that emphasizes the need to think about security in all phases of the software development life cycle.

Vulnerable Mobile Apps: The Next ICS/SCADA Cyber Threat

Researchers find nearly 150 vulnerabilities in SCADA mobile apps downloadable from Google Play.

LockPoS Malware Sneaks onto Kernel via new Injection Technique

"Alarming evolution" of Flokibot bypasses antivirus software and was likely built by a group of advanced attackers, researchers say.

Emailed Cyberattack Targets 2018 Pyeongchang Olympics

More than 300 organizations associated with the 2018 Olympics have been hit with a targeted email campaign.

CISOs' No. 1 Concern in 2018: The Talent Gap

Survey finds 'lack of competent in-house staff' outranks all other forms of cybersecurity worry, including data breaches to ransomware attacks.

Breach of India's Biometric Database Puts 1 Billion Users at Risk

The Tribune reports that hackers gained access to users' names, addresses, phone numbers, and other PII.

Meltdown, Spectre Likely Just Scratch the Surface of Microprocessor Vulnerabilities

There's a lot at stake when it comes to patching the hardware flaws.

Vulnerability Management: The Most Important Security Issue the CISO Doesn't Own

Information security and IT need to team up to make patch management more efficient and effective. Here's how and why.

The Nightmare Before Christmas: Security Flaws Inside our Computers

How an Intel design decision with no review by industry security consultants led to one of the biggest vulnerabilities in recent history.

EDITORS' CHOICE

Microsoft: How the Threat Landscape Will Shift This Year

Exclusive interview with Windows Security lead on how 2017 was a "return to retro" security threats and 2018 will bring increasingly targeted, advanced, and dangerous cyberattacks.

'Tis the Season: Dark Reading Caption Contest Winners

Bricked devices, penetration tests, and virtual reality were among the themes submitted in our latest holiday caption competition. And the winners are ...

Cartoon: C-Suite & Cybersecurity

John Klossner offers a humorous look into the corporate board room.

The Year in Security: 2017