Dark Reading Daily -- August 19, 2020

New 'Duri' Campaign Uses HTML Smuggling to Deliver Malware

Researchers who detected the attack explain what businesses should know about the HTML smuggling technique.

Ransomware Attack on Carnival May Have Been Its Second Compromise This Year

Security vendor Prevailion says it observed signs of malicious activity on the cruise operator's network between at least February and June.

New Campaign Combines Extortion, DDoS

Latest attacks bank on the reputation of two prominent APT groups to increase the threat credibility.

Four Ways to Mitigate Supply Chain Security Risks From Ripple20

Enterprises can significantly alleviate current and long-standing third-party risk by using tactical and strategic efforts to assess and manage them.

Why Quality & Security Both Matter in Software

It's time to position quality and security as equals under the metric of software integrity.

Canadian Government Issues Statement on Credential-Stuffing Attacks

The government is responding to threats targeting the GCKey service and CRA accounts, which are used to access federal services.

Security Jobs With a Future -- And Ones on the Way Out

Some titles are hot, while others are not, amid rapidly shifting business priorities.

Research Casts Doubt on Value of Threat Intel Feeds

Two commercial threat intelligence services and four open source feeds rarely provide the same information, raising questions about how security teams should gauge their utility.

Business Email Compromise Attacks Involving MFA Bypass Increase

Adversaries are using legacy email clients to access and take over accounts protected with strong authentication, Abnormal Security says.

EDITORS' CHOICE

7 Ways to Keep Your Remote Workforce Safe

These tips will help you chart a course for a security strategy that just may become part of the normal way organizations will function over the next several years.

Secure Development Takes a (Remote) Village

The shift to work from home isn't just about giving your Dev team the physical tools they need.

NEW FROM THE EDGE

How to Stay Secure on GitHub

GitHub, used badly, can be a source of more vulnerabilities than successful collaborations. Here are ways to keep your development team from getting burned on GitHub.

7 New Cybersecurity Vulnerabilities That Could Put Your Enterprise at Risk