Dark Reading Daily -- August 20, 2020

Newly Patched Alexa Flaws a Red Flag for Home Workers

Alexa could serve as an entry point to home and corporate networks. Security experts point to the need for manufacturers to work closely with enterprise security teams to spot and shut down IoT device flaws.

Fuzzing Services Help Push Technology into DevOps Pipeline

As part of a continuous testing approach, fuzzing has evolved to provide in-depth code checks for unknown vulnerabilities before deployment.

Sophisticated P2P Botnet Targeting SSH Servers

'FritzFrog' is fileless, uses its own proprietary P2P implementation, and has breached at least 500 servers so far, Guardicore says.

ICS Vulnerability Reports Rapidly Rise

More scrutiny of products for industrial control systems is expected to expose even more weaknesses in devices that run critical infrastructure.

Stolen Data: The Gift That Keeps on Giving

Users regularly reuse logins and passwords, and data thieves are leveraging that reality to breach multiple accounts.

CISA Warns of New RAT Aimed at US Defense Contractors

Hidden Cobra, an APT group associated with the government of North Korea, is thought to be behind the campaign.

Research Casts Doubt on Value of Threat Intel Feeds

Two commercial threat intelligence services and four open source feeds rarely provide the same information, raising questions about how security teams should gauge their utility.

Security Jobs With a Future -- And Ones on the Way Out

Some titles are hot, while others are not, amid rapidly shifting business priorities.

Ransomware Attack on Carnival May Have Been Its Second Compromise This Year

Security vendor Prevailion says it observed signs of malicious activity on the cruise operator's network between at least February and June.

EDITORS' CHOICE

10 Resume and Interview Tips from Security Pros

Experts from the DEF CON Career Hacking Village explain how job seekers can build a resume and rock an interview.

How to Control Security Costs During a Down Economy

Three key areas security professionals should watch when managing their budgets.

LATEST FROM THE EDGE

How to Stay Secure on GitHub

GitHub, used badly, can be a source of more vulnerabilities than successful collaborations. Here are ways to keep your development team from getting burned on GitHub.

7 New Cybersecurity Vulnerabilities That Could Put Your Enterprise at Risk