Dark Reading Weekly -- January 28, 2021

Ransomware Disrupts Operations at Packaging Giant WestRock

Incident is another reminder of how vulnerable OT environments are to attack, security experts say.

How to Better Secure Your Microsoft 365 Environment

Security experts offer Microsoft 365 security guidance as more attackers target enterprise cloud environments.

Intl. Law Enforcement Operation Disrupts Emotet Botnet

Global law enforcement agencies have seized control of Emotet infrastructure, disrupting one of the world's most pervasive and dangerous cyber threats.

SonicWall Is Latest Security Vendor to Disclose Cyberattack

The network security firm is investigating a coordinated campaign in which attackers exploited vulnerabilities in SonicWall's products.

Critical Vulnerability Patched in 'sudo' Utility for Unix-Like OSes

Flaw exists in versions of sudo going back nearly 10 years; USCYBERCOM recommends organizations patch immediately.

Startup Offers Free Version of its 'Passwordless' Technology

Beyond Identity co-founders hope to move the needle in eliminating the need for passwords, but experts say killing passwords altogether won't be easy.

Pay-or-Get-Breached Ransomware Schemes Take Off

In 2020, ransomware attackers moved quickly to adopt so-called "double extortion" schemes, with more than 550 incidents in the fourth quarter alone.

Data Privacy Day 2021: Pandemic Response Data Must Align with Data Privacy Rules

Amid a pandemic, Data Privacy Day this year brings forth expanded responsibilities for organizations in the response to COVID-19.

4 Clues to Spot a Bot Network

Protect against misinformation and disinformation campaigns by learning how to identify the bot networks spreading falsehoods.

Small Security Teams Have Big Security Fears, CISOs Report

Researchers poll security leaders who are tasked with protecting large organizations but have a small presence and budget.

Deloitte & Touche Buys Threat-Hunting Firm

Root9B (R9B) offers threat hunting and other managed security services.

Attackers Leave Stolen Credentials Searchable on Google

Operators behind a global phishing campaign inadvertently left thousands of stolen credentials accessible via Google Search.

Microsoft Releases New Info on SolarWinds Attack Chain

Threat actors went to elaborate lengths to maintain operational security around second-stage payload activation, company says.

Cloud Jacking: The Bold New World of Enterprise Cybersecurity

Increased reliance on cloud computing puts more weight on robust authentication systems to protect data against hijackers.

EDITORS' CHOICE

7 Steps to Secure a WordPress Site

Many companies operate under the assumption that their WordPress sites are secure -- and that couldn't be anything further from the truth.

Why North Korea Excels in Cybercrime

North Korea is laser-focused on boosting its cyber capabilities, and it's doing a remarkable job of it.

LATEST FROM THE EDGE

How Cybersecurity Newbs Can Start Out on the Right Foot

Cybersecurity experts share their savvy tips and useful resources for infosec hopefuls.

Learn SAML: The Language You Don't Know You're Already Speaking

Security Assertion Markup Language, a protocol most people use daily to log into applications, makes authentication easier for both admins and users. Here's what you need to know about SAML (and what it has to do with "GoldenSAML").

2020: The Year in Security