Dark Reading Weekly -- January 20, 2022

Follow Dark Reading:

January 20, 2022

LATEST SECURITY NEWS & COMMENTARY

New Vulnerabilities Highlight Risks of Trust in Public Cloud

Major cloud providers are vulnerable to exploitation because a single flaw can be turned into a global attack using trusted core services.

Russia Takes Down REvil Ransomware Operation, Arrests Key Members

Timing of the move has evoked at least some skepticism from security experts about the country's true motives.

When Patching Security Flaws, Smarter Trumps Faster

Just turning the patch dial to "high" is not enough, and if your company is using the Common Vulnerability Scoring System (CVSS) to prioritize software patching, you are doing it wrong.

Researchers Explore Hacking VirusTotal to Find Stolen Credentials

VirusTotal can be used to collect large amounts of credentials without infecting an organization or buying them online, researchers found.

US Search for Vulnerabilities Drives 10x Increase in Bug Reports

Cross-site scripting and broken access controls continued to be the top classes of vulnerabilities researchers discovered, according to Bugcrowd's annual vulnerability report.

Nigerian Police Arrest 11 Individuals in BEC Crackdown

More than 50,000 targets around the world have been affected by the business email compromise scams, Interpol reports.

The Cybersecurity Measures CTOs Are Actually Implementing

Companies look to multifactor authentication and identity and access management to block attacks, but hedge their bets with disaster recovery.

Redefining the CISO-CIO Relationship

While these roles have different needs, drivers, and objectives, they should complement each other rather than compete with one another.

Cloud Adoption Widens the Cybersecurity Skills Gap

No matter what cloud services you employ, you are still responsible for protecting the security of your data.

Name That Toon: Nowhere to Hide

Feeling creative? Submit your caption and our panel of experts will reward the winner with a $25 Amazon gift card.

MORE NEWS / MORE COMMENTARY


HOT TOPICS
5 Reasons Why M&A Is the Engine Driving Cybersecurity Consistent acquisition of key technologies and talent is a proven strategy for growth. What's Next for Patch Management: Automation The next five years will bring the widespread use of hyperautomation in patch management. Part 3 of 3. MORE

EDITORS' CHOICE

Microsoft Details Recent Damaging Malware Attacks on Ukrainian Organizations

"WhisperGate" malware was used to overwrite Master Boot Record and other files to render systems inoperable at several organizations in Ukraine, Microsoft says.

LATEST FROM THE EDGE

Fighting Back Against Pegasus, Other Advanced Mobile Malware

Detecting infection traces from Pegasus and other APTs can be tricky, complicated by iOS and Android security features.

LATEST FROM DR TECHNOLOGY

How to Protect Your Phone from Pegasus and Other APTs

The good news is that you can take steps to avoid advanced persistent threats. The bad news is that it might cost you iMessage. And FaceTime.

Tech Resources

ACCESS TECH LIBRARY NOW

2021 DDoS Attack Trends: Year in Review
2021 was an exceptionally busy year for attackers. From some of the largest volumetric DDoS attacks launched by historically large swarms of botnets, to massive ransomware and ransom DDoS attack campaigns that interrupted aspects of critical infrastructure around the world, DDoS ...
Beyond Patch Management: Next-Generation Approaches to Finding and Fixing Vulnerable Code
A good patch management process can help make your enterprise data more secure. But what does it do for vulnerabilities that haven't been patched? Attackers are increasingly manipulating open-source, third-party components in software -- do you have a process to ...

FEATURED REPORTS

Zero Trust in Real Life
Enterprise Cybersecurity Plans in a Post-Pandemic World
As the COVID-19 pandemic eases, IT security threats and the challenges involved in responding to them are trending upward. Security leaders expect that cyberattacks like ransomware, phishing, and malware will increase even as the pandemic eventually recedes. Download the Dark ...

CURRENT ISSUE

How Enterprises Are Assessing Cybersecurity Risk in Today's Environment
DOWNLOAD THIS ISSUE	SUBSCRIBE NOW
BACK ISSUES \| MUST READS \| TECH DIGEST

PRODUCTS & RELEASES

LogPoint Releases LogPoint 7, Adding SOAR Capabilities Within SIEM

(ISC)² Launches Entry-Level Cybersecurity Course

Kaspersky Announces Takedown Service

Kovrr Translates Cyber Risk into Business Impact with its Quantum Platform

Oxeye Introduce Open Source Payload Deobfuscation Tool

MORE PRODUCTS & RELEASES

Dark Reading Weekly
-- Published By Dark Reading
Informa Tech
303 Second St., Suite 900 South Tower, San Francisco, CA 94107

To update your profile, change your e-mail address, or unsubscribe, click here.

To opt-out of any future Dark Reading Weekly Newsletter emails, please respond here.

Thoughts about this newsletter? Give us feedback.

Keep This Newsletter Out Of Your SPAM Folder
Don't let future editions go missing. Take a moment to add the newsletter's address to your anti-spam white list:

If you're not sure how to do that, ask your administrator or ISP. Or check your anti-spam utility's documentation.

We take your privacy very seriously. Please review our Privacy Statement.