Dark Reading Daily -- August 07, 2019

New Speculative Execution Vulnerability Gives CISOs a New Reason to Lose Sleep

The vulnerability, dubbed SWAPGS, is an undetectable threat to data security, similar in some respects to Spectre and Meltdown.

US Air Force Bug Bounty Program Nets 54 Flaws for $123,000

The Air Force brought together 50 vetted hackers to find the vulnerabilities in the latest bug-bounty program hosted by a branch of the US military.

Ongoing Campaign Spoofs Walmart, Dating, Movie Sites

A new investigation detects more than 540 domain names linked to the Walmart brand and camouflaged as career, dating, and entertainment websites.

When Perceived Cybersecurity Risk Outweighs Reality

Teams need to manage perceived risks so they can focus on fighting the real fires.

Security & the Infinite Capacity to Rationalize

To improve the security posture of our organizations, we must open our eyes to rationalization and put an end to it with logic. Here's how.

Russian Attack Group Uses Phones & Printers to Breach Corporate Networks

Microsoft spotted Strontium, also known as APT28 or Fancy Bear, using IoT devices to breach businesses and seek high-value data.

FBI Issues Relationship Fraud/Confidence Scheme Warning

Criminals are getting increasingly sophisticated in their efforts to commit fraud and recruit 'money mules,' according to the FBI.

8 Free Tools to Be Showcased at Black Hat and DEF CON

Expect a full slate of enterprise-class open source tools to take the spotlight when security researchers share their bounties with the community at large.

How to Keep Your Web Servers Secure

The good news is that Web servers have come a long way in terms of security. But to err is human, even for IT and security people.

Cisco Pays $8.6M in First False Claims Suit for Vulnerabilities in Security Product

A security consultant reported vulnerabilities in Cisco's Video Surveillance Manager in 2009 - but the company ignored the issues and fired the consultant.

EDITORS' CHOICE

8 Head-Turning Ransomware Attacks to Hit City Governments

Hackers know vulnerable systems when they see them, and they also know this: Many government systems are decades old, running Windows 7 and even Windows XP.

Dark Reading News Desk Live at Black Hat USA 2019

Watch right here for more than 30 video interviews with speakers and sponsors. Streaming live from Black Hat USA Wednesday and Thursday 2 p.m. to 6 p.m. Eastern.

NEW FROM THE EDGE

Hollywood-Style Hacker Fight

Watch movies much? Here's what happens when two hackers try to outhack each other.

Building and Managing an IT Security Operations Program