Dark Reading Daily -- March 11, 2020

Over 80% of Medical Imaging Devices Run on Outdated Operating Systems

New data on live Internet of Things devices in healthcare and other organizations shines a light on security risks.

Researchers Develop New Side-Channel Attacks on Intel CPUs

Load Value Injection (LVI) takes advantage of speculative execution processes just like Meltdown and Spectre, say security researchers from Bitdefender and several universities.

How Network Metadata Can Transform Compromise Assessment

Listen more closely and your network's metadata will surrender insights the bad guys counted on keeping secret

3 Tips to Stay Secure When You Lose an Employee

Whether they leave for a better job or get fired, and whether they mean to cause problems or do so out of ignorance, ex-workers can pose a threat to your company.

Bitsight and Microsoft Disrupt Necurs Botnet

But roughly 2 million infected systems remain in the wild, and infected systems could be reactivated at any time.

Microsoft Patches Over 100 Vulnerabilities

Patch Tuesday features several remote code execution flaws in Microsoft Word.

Paradise Ransomware Variant Hides in Office IQY Files

The uncommon Internet Query file format lets attacks slip past defenses to effectively break into target networks.

Most Cyberattacks in 2019 Were Waged Without Malware

If the "malware-free" attack trajectory continues, it could mean major trouble for defenders, according to experts from CrowdStrike and other security companies.

Threat Awareness: A Critical First Step in Detecting Adversaries

One thing seems certain: Attackers are only getting more devious and lethal. Expect to see more advanced attacks.

New Ransomware Variant Developed Entirely as Shellcode

PwndLocker is harder to detect than other crypto-malware, Crypsis Group says.

EDITORS' CHOICE

7 Cloud Attack Techniques You Should Worry About

Security pros detail the common and concerning ways attackers target enterprise cloud environments.

Cyber Resiliency, Cloud & the Evolving Role of the Firewall

Today's defenses must be creative in both isolating threats and segmenting environments to prevent attacks. Here's why.

NEW FROM THE EDGE

Keys to Hiring Cybersecurity Pros When Certification Can't Help

There just aren't enough certified cybersecurity pros to go around -- and there likely never will be enough. So how do you fill out your cybersecurity team? Executives and hiring managers share their top tips on recognizing solid candidates.

What Should I Do About Vulnerabilities Without Fixes?

With better tools that identify potential threats even before developers address them, a new problem has arisen.

6 Emerging Cyber Threats That Enterprises Face in 2020