Dark Reading Weekly -- December 06, 2018

MITRE Changes the Game in Security Product Testing

Nonprofit has published its first-ever evaluation of popular endpoint security tools - measured against its ATT&CK model.

Starwood Breach Reaction Focuses on 4-Year Dwell

The unusually long dwell time in the Starwood breach has implications for both parent company Marriott International and the companies watching to learn from.

'London Blue' BEC Cybercrime Gang Unmasked

Security firm turned the tables on attackers targeting its chief financial officer in an email-borne financial scam.

Toyota Builds Open-Source Car-Hacking Tool

'PASTA' testing platform specs will be shared via open-source.

6 Ways to Strengthen Your GDPR Compliance Efforts

Companies have some mistaken notions about how to comply with the new data protection and privacy regulation - and that could cost them.

The Case for a Human Security Officer

Wanted: a security exec responsible for identifying and mitigating the attack vectors and vulnerabilities specifically targeting and involving people.

Filling the Cybersecurity Jobs Gap - Now and in the Future

Employers must start broadening their search for experienced security professionals to include people with the right traits rather than the right skills.

5 Emerging Trends in Cybercrime

Organizations can start today to protect against 2019's threats. Look out for crooks using AI "fuzzing" techniques, machine learning, and swarms.

Microsoft, Mastercard Aim to Change Identity Management

A new partnership wants to improve how people use and manage the virtual identities that govern their lives online.

EDITORS' CHOICE

Holiday Hacks: 6 Cyberthreats to Watch Right Now

'Tis the season for holiday crafted phishes, scams, and a range of cyberattacks. Experts list the hottest holiday hacks for 2018.

Threat Hunting: Improving Bot Detection in Enterprise SD-WANs

How security researchers tracked down Kuai and Bujoi malware through multiple vectors including client type, traffic frequency, and destination.

10 Best Practices That Could Reshape Your IT Security Department