Dark Reading Weekly -- August 19, 2021

More Than 47M Affected in T-Mobile Breach

T-Mobile has confirmed stolen records included account information for 7.8 million current customers and 40 million former or prospective customers.

Ransomware Attacker Offers Employees a Cut if They Install DemonWare on Their Organization's Systems

Researchers went undercover and posed as willing "insider threats" to expose and study an unusual hybrid BEC-style social engineering-ransomware scheme.

Critical Vulnerability Affects Millions of IoT Devices

CISA, Mandiant, and ThroughTek share the details of a vulnerability that could allow attackers to observe camera feeds and remotely control devices.

FireEye Launches XDR Platform

FireEye debuts its new flagship product following the sale of its products business to Symphony Technology Group for $1.2 billion.

Troubling New Disk-Level Encryption Ransomware Surfaces

"DeepBlueMagic" also deletes Volume Shadow copy for Windows, making recovery all but impossible without a decryption key.

Cost of Cyberattacks Significantly Higher for Smaller Healthcare Organizations

Significant oversights, such as lack of automation and continued vulnerability to old threats, leave healthcare organizations at risk.

Google Releases Tool to Help Developers Enforce Security

The AllStars tool allows software maintainers to automatically check specific facets of their project, such as security policy.

Zero-Day Flaw Found in Fortinet's FortiWeb WAF Technology

Vendor says it plans to have a patch for the vulnerability by this weekend.

Contain a Ransomware Attack Before It Spreads

While ransomware attacks can be difficult to proactively prevent, enterprises can stop them from spreading and avoid extensive damage by implementing several key defensive measures.

Online Businesses Become a Phisher's Playground

A global shift to online business this year has led to an increase in phishing attacks through website builders and CMS platforms. But not nearly enough businesses have deployed sufficient security measures against these campaigns.

It's Not Your Imagination: API and Web Security Is Getting Harder

With today's pace of rapid change, security must live everywhere that apps and APIs reside, and organizations can no longer rely on tools that weren't built with the decentralized enterprise in mind.

SOC Investment Leads to Improved Incident Response Times

Dark Reading’s 2021 Incident Response Survey reveals an upswing in SOC capabilities with promising results.

Name That Toon: Screen Time

Feeling creative? Submit your caption and our panel of experts will reward the winner with a $25 Amazon gift card.

Enterprise Cybersecurity Plans in a Post-Pandemic World