Dark Reading Daily -- February 28, 2019

More Than 22,000 Vulns Were Disclosed in 2018, 27% Without Fixes

As in previous years, input validation vulnerabilities accounted for a substantial proportion of total, Risk Based Security report shows.

Persistent Attackers Rarely Use Bespoke Malware

Study of the Bronze Union group-also known as APT27 or Emissary Panda-underscores how most advanced persistent threat (APT) groups now use administrative tools or slight variants of well-known tools.

IoT, APIs, and Criminal Bots Pose Evolving Dangers

A pair of reports reach similar conclusions about some of the threats growing in cyberspace and the industries likely to be most affected.

European Security Firm to Offer Free Hacking Toolkit

CQTools suite includes both exploit kits and information-extraction functions, its developers say.

Intel Focuses on Data Center, Firmware Security Ahead of RSAC

The new Intel SGX Card is intended to extend application memory security using Intel SGX in existing data center infrastructure.

Stay Ahead of the Curve by Using AI in Compliance

Although human oversight is required, advanced technologies built on AI will become pivotal in building safer financial markets and a safer world.

Former Albany College Student Charged with Computer Damage

Vishwanath Akuthota has been accused of using a 'USB killer device' to destroy dozens of computers, officials report.

Booter Owner Pleads Guilty in Federal Court

Illinois man offered "DDoS for hire" services that hit millions of victims.

Why Cybersecurity Burnout Is Real (and What to Do About It)

The constant stresses from advanced malware to zero-day vulnerabilities can easily turn into employee overload with potentially dangerous consequences. Here's how to turn down the pressure.

6 Tips for Getting the Most from Your VPN

VPNs are critical for information security. But simply having these cozy security tunnels in the toolkit isn't enough to keep an organization's data safe.

Embracing DevSecOps: 5 Processes to Improve DevOps Security

In the cyber threat climate of the 21st century, sticking with DevOps is no longer an option.

EDITORS' CHOICE

Your Employees Want to Learn. How Should You Teach Them?

Security practitioners are most likely to stay at organizations that offer career development. Here are eight tips to consider as you plan your course of action.

Whose Line Is It? When Voice Phishing Attacks Get Sneaky

Researchers investigate malicious apps designed to intercept calls to legitimate numbers, making voice phishing attacks harder to detect.

5 Emerging Cyber Threats to Watch for in 2019