Dark Reading Daily -- July 25, 2018

New Report Shows Pen Testers Usually Win

Pen testers are successful most of the time, and it's not all about stolen credentials, according to a new report based on hundreds of tests.

Threat Hunting: Rethinking 'Needle in a Haystack' Security Defenses

In cyber, needles (that is, threats) can disappear quickly, for a variety of reasons, and long often after hackers have completed what they came to do.

DHS Officials: Hundreds of US Utility Victims Infiltrated by Russian Hackers

Federal government officials up their count of US energy sector victims from dozens to hundreds, according to a Wall Street Journal report.

Trend Micro Launches Targeted Server-Side Bug Bounty Program

Targeted Incentive Program will pay anywhere from $25,000 to $200,000 to researchers who are first to demonstrate exploitable vulnerabilities.

OpenWhisk at Risk: Critical Bug Leaves IBM Cloud Exposed

IBM and Apache have issued patches for a vulnerability that let attackers overwrite any company's serverless code with malicious content.

New Free Chrome Plugin Blocks Cryptojacking Browser Attacks

Qualys also plans Firefox, Safari, IE versions.

How 'Projection' Slows Down the Path to Security Maturity

A little bit of self-awareness goes a long way when it comes to evaluating a company's security maturity level. It's also a prerequisite to improving.

72% of CEOs Steal Corporate IP from Former Employers

Employees often take corporate IP because they feel ownership over their work, a trend security experts say is a problem.

6 Ways to Tell an Insider Has Gone Rogue

Malicious activity by trusted users can be very hard to catch, so look for these red flags.

What the Incident Responders Saw

New report on IR professionals' experiences reveals just how advanced attackers, such as nation-state hackers, dig in even after they're detected.

EDITORS' CHOICE

7 Ways to Better Secure Electronic Health Records

Healthcare data is prime targets for hackers. What can healthcare organizations do to better protect all of that sensitive information?

The Fundamental Flaw in Security Awareness Programs

It's a ridiculous business decision to rely on the discretion of a minimally trained user to thwart a highly skilled sociopath, financially motivated criminal, or nation-state.

The Biggest Cybersecurity Breaches of 2018 (So Far)