Dark Reading Weekly -- February 24, 2022

Ransomware Trained on Manufacturing Firms Led Cyberattacks in Industrial Sector

Meanwhile, a few "alarming" infiltrations of OT networks by previously unknown threat groups occurred last year as well.

More Orgs Suffered Successful Phishing Attacks in 2021 Than in 2020

Threat actors maintained their relentless attacks on enterprise end users for yet another year, new study shows.

Microsoft Debuts Unified Service for Multicloud ID Management

With nine in 10 companies adopting a multicloud strategy, service providers are focused on finding ways to support the management and security efforts of businesses that rely on multiple cloud resources.

Key Application Security Metrics Show Few Signs of Improvement

A new study shows that organizations continued to take an inordinately long time to fix vulnerabilities and fixed fewer known issues in their environments last year than in 2020.

Attackers Hone Their Playbooks, Become More Agile

Less malware, more interactive intrusions, and big game hunting lead to more success, with an 82% increase in ransomware-related data leaks.

New Data-Wiping Malware Discovered on Systems in Ukraine

Researchers were scrambling to analyze a newly discovered piece of data-wiping malware found in the wild.

NSA Issues Guidance for Selecting Strong Cisco Password Types

Poorly protected passwords in device configuration files present a risk of compromise, agency says.

Open Source Code: The Next Major Wave of Cyberattacks

The ubiquity of open source software presents a significant security risk, as it opens the door for vulnerabilities to be introduced (intentionally or inadvertently) to those who use it.

Ukraine DDoS: 'Cyberattack' or Not?

The country was hit by a distributed denial-of-service attack on Feb. 15, but some say that doesn't rise to the level of "cyberattack." Here's why they're wrong.

Name That Toon: Out in the Cold

Feeling creative? Submit your caption and our panel of experts will reward the winner with a $25 Amazon gift card.

Hidden Costs of a Data Breach

Don't consider just the initial costs. Hidden factors include remediation, revenue loss, reputational harm, national security — even human life.

Free Cybersecurity Tools and Services List Published by CISA

The Cybersecurity & Infrastructure Security Agency (CISA) says this "living repository" is a mix of popular open source and free tools and services from both the private and public sectors.

CISA Warns of New Malware Framework Used by Russian 'Sandworm' Hacking Team

Russian General Staff Main Intelligence Directorate (GRU) hacking team appears to have swapped its VPNFilter malware platform for the so-called Cyclops Blink malware framework.

How Enterprises Plan to Address Endpoint Security Threats in a Post-Pandemic World