Dark Reading Daily -- November 01, 2022

Patch Now: Dangerous RCE Bug Lays Open ConnectWise Server Backup Managers

A critical security vulnerability gives attackers a way to compromise thousands of systems at ConnectWise's managed service provider (MSP) customer locations and their downstream clients.

Zscaler's Cloud-Based Cybersecurity Outages Showcase Redundancy Problem

While fewer cloud providers are suffering outages, customers should prepare for the uncommon event, especially when relying on cloud services for security.

White House Convenes International Ransomware Summit

Dozens of international delegations meet for the second year to share intel, with a goal of stopping ransomware attacks on critical infrastructure.

Cyberattack Strikes Global Copper Conglomerate

Now mostly recovered, Aurubis said the breach was part of a broader campaign against the metals and mining industry.

Does Security Have to Get Worse Before It Gets Better?

How to solve the software vulnerability problem across the entire SDLC.

(Sponsored Article) 4 Reasons Open Source Matters for Cloud Security

When we depend on an open commons as our computing foundation, we need it to be secure, and the most effective way to do that is through open solutions.

Cranefly Cyberspy Group Spawns Unique ISS Technique

The threat actor uses commands from legitimate IIS logs to communicate with custom tools in a savvy bid to hide traces of its activity on victim machines.

Reimagining the Role of the CISO

Embedding security throughout your company has greater organizational impact and myriad benefits.

How to Attract Top Research Talent for Your Bug Bounty Program

Successful bug bounty programs strike a balance between vendor benefits and researcher incentives.

7 Hidden Social Media Cyber-Risks for Enterprises

Leaning on social media to amplify your company's brand? Here's a look at the emerging cybersecurity risks that can arise from TikTok, LinkedIn, Twitter, and other platforms.

LATEST FROM THE EDGE

Why Are Zombie APIs and Shadow APIs So Scary?

A lax API governance strategy can lead to abandoned or overlooked APIs that open up organizations to security threats.

LATEST FROM DR TECHNOLOGY

How Chipmakers Are Implementing Confidential Computing

On-chip solutions aim to prevent breaches by separating the computing element and keeping data in the secure vault at all times.

Building the SOC of the Future