Dark Reading Weekly -- March 17, 2022

Mobile Threats Skyrocket

A new report shows an explosion of zero-day attacks and malware focused on mobile devices just as companies adopted widespread bring-your-own device policies.

What the Newly Signed US Cyber-Incident Law Means for Security

Bipartisan cybersecurity legislation comes amid increased worries over ransomware, and fears of cyberattacks from Russia in the wake of its invasion of Ukraine.

NAS Vendor Says Several of Its Products Likely Contain Linux 'Dirty Pipe' Flaw

QNAP's disclosure this week is the latest reminder of the potentially wide impact of privilege escalation flaw in the Linux kernel.

VPNs Give Russians an End Run Around Censorship

As the invasion of Ukraine continues, Russian citizens have turned to virtual private networks — boosting demand for the software by 27x — to circumvent the government's blocks on social media and news sites critical of the war.

Would 'Cyber Geneva Conventions' Defuse Online Aggression?

International treaties could force nation-states to police bad actors within their borders to avoid penalties.

As Log4j Continues to Remind Us, What's Old Is New Again

We need to focus on the bad guys and their methods instead of playing whack-a-mole with indicators of compromise.

Cyber Insurance and Business Risk: How the Relationship Is Changing Reinsurance & Policy Guidance

While cyber insurance will continue to exist, it will cost more and cover less — and that's changing the risk your company faces.

How to Combat the No. 1 Cause of Security Breaches: Complexity

The scaling of hardware, software and people has created an ever-growing complexity problem.

8 More Women in Security You May Not Know but Should

Dark Reading highlights women who are quietly changing the game in cybersecurity. We also revisit some of those we've spoken to in the past to see what they're up to now.

EDITORS' CHOICE

Identity Attacks Threaten Workloads, Not Just Humans

Companies have embraced the cloud and accelerated adoption, but with insider access to infrastructure even more available, can businesses defend their expanded attack surface?

LATEST FROM THE EDGE

Embracing Security by Design: Security Isn't a Pretty Picture

A starting point for secure UI and UX? Remember that security measures should frustrate attackers, not users.

LATEST FROM DR TECHNOLOGY

What Kind Of Security Tools Should I Provide My Developers?

Who says developers don't care about security? Give them the tools to help them build security into their code.

How Enterprises Plan to Address Endpoint Security Threats in a Post-Pandemic World