Dark Reading Daily -- October 19, 2022

Phishing Mitigation Can Cost Businesses More Than $1M Annually

One of the oldest tactics in cybercrime is still one of the most widely feared — and with good reason, as campaigns are expected to increase and become more sophisticated over the next 12 months.

CISA Offers Free RedEye Analytics Tool for Red Teams

The tool helps red teams manage their activities, analyze the data from their campaigns, create reports, and better present results to organizations.

Treat Essential Security Certificates as Valuable Assets

Manage the company's often-overlooked security certificates as the valuable assets they are, essential for security hygiene and to prevent issues.

Shared Responsibility or Shared Fate? Decentralized IT Means We Are All Cyber Defenders

With the IT universe expanding, collaboration, thoughtfulness, and discipline can ensure a more secure future.

German Cybersecurity Boss Sacked Over Kremlin Connection

Head of German national cybersecurity agency was fired over ties to a member of Russian intelligence once honored by Vladimir Putin.

Gen Z, Millennial Workers Are Bigger Cybersecurity Risks Than Older Employees

Younger workers surveyed are less likely to follow established business cybersecurity protocols than their Gen X and baby boomer counterparts, a new survey finds.

Cybersecurity's Hiring Spree Requires a Recruiting Rethink

Just 65 cybersecurity professionals are in the workforce for every 100 available jobs, new study shows.

4 Stakeholders Critical to Addressing the Cybersecurity Workforce Gap

A cross-disciplinary effort of change is needed to attract new professionals in the coming decade.

Microsoft 365 Message Encryption Can Leak Sensitive Info

The default email encryption used in Microsoft Office's cloud version is leaky, which the company acknowledged but said it wouldn't fix.

Researchers Keep a Wary Eye on Critical New Vulnerability in Apache Commons Text

There's nothing yet to suggest CVE-2022-42889 is the next Log4j. But proof-of-concept code is available, and interest appears to be ticking up.

LATEST FROM THE EDGE

What Is the Difference Between Identity Verification and Authentication?

Identity verification and identity authentication are neither synonymous nor interchangeable, and implementing both is essential to fighting fraud.

LATEST FROM DR TECHNOLOGY

Patching-as-a-Service Offers Benefits, Challenges

Organizations without the time or talent to patch may find patching-as-a-service a way to improve security.

Building the SOC of the Future