Dark Reading Daily -- March 19, 2020

Process Injection Tops Attacker Techniques for 2019

Attackers commonly use remote administration and network management tools for lateral movement, a new pool of threat data shows.

TrickBot Module Takes Aim at Remote Desktops

The module, still in development, focuses on compromising Windows systems by brute-forcing accounts via the Remote Desktop Protocol.

Skimmer May Have Put NutriBullet Customers' Card Data at Risk for Nearly a Month

Blender maker is the latest victim of Magecart.

Facebook Got Tagged, but not Hard Enough

Ensuring that our valuable biometric information is protected is worth more than a $550 million settlement.

What the Battle of Britain Can Teach Us About Cybersecurity's Human Element

During WWII, the British leveraged both technology and human intelligence to help win the war. Security leaders must learn the lessons of history and consider how the human element can make their machine-based systems more effective.

500,000 Documents Exposed in Open S3 Bucket Incident

The open database exposed highly sensitive financial and business documents related to two financial organizations.

Trend Micro Patches Two Zero-Days Under Attack

Businesses are urged to update the Apex One and OfficeScan XG enterprise security products as soon as possible.

Report: Shadow IoT Emerging as New Enterprise Security Problem

Much of the traffic egressing enterprise networks are from poorly protected Internet-connected consumer devices, a Zscaler study finds.

Working from Home? These Tips Can Help You Adapt

COVID-19 means many people are doing their jobs from outside the confines of the office. That may not be as easy as it sounds.

COVID-19 Drives Rush to Remote Work. Is Your Security Team Ready?

A rapid transition to remote work puts pressure on security teams to understand and address a wave of potential security risks.

EDITORS' CHOICE

Security Lessons We've Learned (So Far) from COVID-19

Takeaways about fighting new fires, securely enabling remote workforces, and human nature during difficult times.

Needed: A Cybersecurity Good Samaritan Law

Legislation should protect the good hackers who are helping to keep us safe, not just go after the bad.

NEW FROM THE EDGE

Beyond Burnout: What Is Cybersecurity Doing to Us?

Infosec professionals may feel not only fatigued, but isolated, unwell, and unsafe. And the problem may hurt both them and the businesses they aim to protect.

6 Emerging Cyber Threats That Enterprises Face in 2020