Dark Reading Weekly -- December 21, 2017

Attack Attribution Tricky Say Some as US Blames North Korea for WannaCry

There's not enough evidence to conclusively tie the rogue regime to the ransomware attacks, some security experts say.

Kaspersky Lab Files Lawsuit Over DHS Ban of its Products

Security firm petitions US District Court to rescind decision to prohibit its products on US federal government systems.

Microsoft Office Docs New Vessel for Loki Malware

Loki malware, built to steal credentials, is distributed via Microsoft Excel and other Office applications rigged with malicious 'scriptlets' to evade detection.

BlueBorne Attack Highlights Flaws in Linux, IoT Security

Bluetooth vulnerabilities let attackers control devices running Linux or any OS derived from it, putting much of the Internet of Things at risk, including popular consumer products.

Why Hackers Are in Such High Demand, and How They're Affecting Business Culture

White hat hackers bring value to organizations and help them defend against today's advanced threats.

Is Your Security Workflow Backwards?

The pace at which information security evolves means organizations must work smarter, not harder. Here's how to stay ahead of the threats.

Top 8 Cybersecurity Skills IT Pros Need in 2018

Cloud security architecture skills to customer-service savvy are among the key IT security skills needed next year as CIOs ramp up hiring.

Malware Decompiler Tool Goes Open Source

Avast's RetDec machine-code decompiler now available for free on Github.

Advanced Deception: How It Works & Why Attackers Hate It

While cyberattacks continue to grow, deception-based technology is providing accurate and scalable detection and response to in-network threats.

EDITORS' CHOICE

9 Banking Trojans & Trends Costing Businesses in 2017

New Trojans appeared, old ones resurfaced, and delivery methods evolved as cybercriminals set their sights on financial data.

'Starwars' Debuts on List of Worst Passwords of 2017

Many of the old standbys made this year's list of the 25 stolen - and weakest - passwords found dumped online.

The Year in Security: 2017