Dark Reading Daily -- January 20, 2022

Nigerian Police Arrest 11 Individuals in BEC Crackdown

More than 50,000 targets around the world have been affected by the business email compromise scams, Interpol reports.

FireEye & McAfee Enterprise Renamed as Trellix

Symphony Technology Group announces a name for the newly merged company, which aims to become a leader in extended detection and response (XDR).

Revamped Community-Based DDoS Defense Tool Improves Filtering

Team Cymru updates its Unwanted Traffic Removal Service (UTRS), adding more granular controls and greater ranges of both IPv4 and IPv6 addresses.

When Patching Security Flaws, Smarter Trumps Faster

Just turning the patch dial to "high" is not enough, and if your company is using the Common Vulnerability Scoring System (CVSS) to prioritize software patching, you are doing it wrong.

Cloud Adoption Widens the Cybersecurity Skills Gap

No matter what cloud services you employ, you are still responsible for protecting the security of your data.

Preparing for the Next Cybersecurity Epidemic: Deepfakes

Using blockchain, multifactor authentication, or signatures can help boost authentication security and reduce fraud.

1Password Raises $620M Series C, Now Valued at $6.8B

The massive funding round comes as the rise of cloud and remote work led to new threats and growing security and privacy concerns.

Researchers Explore Hacking VirusTotal to Find Stolen Credentials

VirusTotal can be used to collect large amounts of credentials without infecting an organization or buying them online, researchers found.

New Vulnerabilities Highlight Risks of Trust in Public Cloud

Major cloud providers are vulnerable to exploitation because a single flaw can be turned into a global attack using trusted core services.

Name That Toon: Nowhere to Hide

Feeling creative? Submit your caption and our panel of experts will reward the winner with a $25 Amazon gift card.

EDITORS' CHOICE

Microsoft Details Recent Damaging Malware Attacks on Ukrainian Organizations

"WhisperGate" malware was used to overwrite Master Boot Record and other files to render systems inoperable at several organizations in Ukraine, Microsoft says.

LATEST FROM THE EDGE

What Happens to My Organization If APIs Are Compromised?

Once attackers have obtained access, they can compromise other systems or pivot within your networks.

LATEST FROM DR TECHNOLOGY

The Cybersecurity Measures CTOs Are Actually Implementing

Companies look to multifactor authentication and identity and access management to block attacks, but hedge their bets with disaster recovery.

How Enterprises Are Assessing Cybersecurity Risk in Today's Environment