Dark Reading Daily -- January 11, 2022

No Significant Intrusions Related to Log4j Flaw Yet, CISA Says

But that could change anytime, officials warn, urging organizations to prioritize patching against the critical remote code execution flaw.

Microsoft: macOS 'Powerdir' Flaw Could Let Attackers Gain Access to User Data

The vulnerability could allow an attacker to bypass the macOS Transparency, Consent, and Control measures to access a user's protected data.

Breach Response Shift: More Lawyers, Less Cyber-Insurance Coverage

Companies are more likely to rely on outside attorneys to handle cyber response in order to contain potential lawsuits. Meanwhile, cyber-insurance premiums are rising but covering less.

The Evolution of Patch Management: How and When It Got So Complicated

In the wake of WannaCry and its ilk, the National Vulnerability Database arose to help security organizations track and prioritize vulnerabilities to patch. Part 1 of 3.

(Sponsored Article) Convergence Zone: CNAPP Aids in Integrated Cloud-Native Security

Cloud Native Application Protection Platforms (CNAPP) allow organizations to secure cloud-native applications across the full application life cycle.

FBI Warns FIN7 Campaign Delivers Ransomware via BadUSB

An FBI warning says the FIN7 cybercrime group has sent packages containing malicious USB drives to US companies in an effort to spread ransomware.

New Mac Malware Samples Underscore Growing Threat

A handful of malicious tools that emerged last year showed threat actors may be getting more serious about attacking Apple macOS and iOS environments.

Attackers Exploit Log4j Flaws in Hands-on-Keyboard Attacks to Drop Reverse Shells

Microsoft says vulnerabilities present a "real and present" danger, citing high volume of scanning and attack activity targeting the widely used Apache logging framework.

Why CIOs Should Report to CISOs

If the CISO is responsible for the security of the organization, then that same person also should be responsible for both security and IT infrastructure.

EDITORS' CHOICE

How to Proactively Limit Damage From BlackMatter Ransomware

Logic flaw exists in malware that can be used to prevent it from encrypting remote shares, security vendor says.

LATEST FROM THE EDGE

What Editing Crosswords Can Teach Us About Security Leadership

When security leaders look for mistakes, they often find them before customers do.

LATEST FROM DR TECHNOLOGY

Darktrace's Max Heinemeyer on Future of Ransomware

In this episode of Tech Talk, Max Heinemeyer, director of threat hunting at Darktrace, sits down with Dark Reading’s Terry Sweeney to discuss emerging ransomware trends and how they will impact the security landscape.

How Enterprises Are Assessing Cybersecurity Risk in Today's Environment