Dark Reading Daily -- September 02, 2020

New Threat Activity by Lazarus Group Spells Trouble For Orgs

The North Korea-backed group has launched several campaigns to raise revenue for cash-strapped nation's missile program, security experts say.

Anti-Phishing Startup Pixm Aims to Hook Browser-Based Threats

Pixm visually analyzes phishing websites from a human perspective to detect malicious pages people might otherwise miss.

Why Are There Still So Many Windows 7 Devices?

As the FBI warns, devices become more vulnerable to exploitation as time passes, due to a lack of security updates and new, emerging vulnerabilities.

ISO 27701 Paves the Way for a Strategic Approach to Privacy

As the first certifiable international privacy management standard, ISO 27701 is a welcome addition to the existing set of common security frameworks.

Apple Signs Shlayer, Legitimizes Malware

Shlayer, a common macOS Trojan, received Apple's notary certification and place in the App Store -- twice.

New APT Pioneer Kitten Linked to Iranian Government

The group's targets have primarily been North American and Israeli entities, with a focus on technology, government, defense, and healthcare.

'Transparent Tribe' APT Group Deploys New Android Spyware for Cyber Espionage

The group, which has been around since at least 2013, has impacted thousands of organizations, mostly in India.

Is China the World's Greatest Cyber Power?

While the US, Russia, Israel, and several European nations all have sophisticated cyber capabilities, one threat intelligence firm argues that China's aggressive approach to cyber operations has made it "perhaps the world's greatest cyber power."

Testing & Automation Pay Off for NSA's DevSecOps Project

Communication with stakeholders, extensive testing, and robust automation pays dividends for military intelligence agency, one of several presenters at GitLab's virtual Commit conference.

EDITORS' CHOICE

Ransomware Red Flags: 7 Signs You're About to Get Hit

Caught off guard by a ransomware attack? Security experts say the warning signs were there all along.

How CISOs Can Play a New Role in Defining the Future of Work

Rather than just reacting to security issues in the COVID-19 era, CISOs are now in a position to be change agents alongside their C-suite peers.

NEW FROM THE EDGE

AI on the Email Offense

Mass domain purchasing enables email attackers to slip by traditional defenses. Here's how artificial intelligence can stop them.

Poll: Help Wanted

Is your security team hiring?

7 New Cybersecurity Vulnerabilities That Could Put Your Enterprise at Risk