Dark Reading Daily -- March 23, 2021

Researchers Discover Two Dozen Malicious Chrome Extensions

Extensions are being used to serve up unwanted adds, steal data, and divert users to malicious sites, Cato Networks says.

CSA & ISACA Team Up on Cloud Auditing Certificate

The Certificate of Cloud Auditing Knowledge aims to fill a gap in the market for cloud IT auditing as more organizations work in cloud environments.

(Sponsored Article) How to Combat the New 'Insider Threat': Compromised Partners

It's difficult to stop supply chain attacks if partner accounts are compromised. What can you do when these attacks are indistinguishable from insider threats?

Top 3 Cybersecurity Lessons Learned From the Pandemic

Defending an enterprise of fully remote employees and their devices at this scale and speed had never been done before. Now, we do it every day.

On the Road to Good Cloud Security: Are We There Yet?

Misconfigured infrastructure is IT pros' top cloud security concern, but they're conflicted on how to address it in practice.

Acer Reportedly Hit With $50M Ransomware Attack

Reports say a ransomware gang has given Acer until March 28 to pay, or it will double the ransom amount.

Qualys CEO Courtot Departs for Health Reasons

The well-known security industry entrepreneur initially took a leave of absence in February.

SolarWinds-Linked Attackers Target Microsoft 365 Mailboxes

Researchers observe attackers altering mailbox folders to assign read-only permissions to any authenticated user on a target machine.

New Malware Hidden in Apple IDE Targets macOS Developers

XcodeSpy is latest example of growing attacks on software supply chain.

5 Ways Social Engineers Crack Into Human Beings

These common human traits are the basic ingredients in the con-man's recipe for trickery.

EDITORS' CHOICE

7 Tips to Secure the Enterprise Against Tax Scams

Tax season is yet another opportunity for fraudsters to target your company. Here's how to keep everyone in the organization on their toes.

How Us Shady Geeks Put Others Off Security

Early adopters of security and privacy tools may be perceived by others as paranoid, which, in turn, may repel non-experts from protecting themselves online.

LATEST FROM THE EDGE

3 Classes of Account Fraud That Can Cost Your Company Big Time

Understanding each one can go a long way toward demystifying the topic as a whole - and combatting the threat.

2021 Top Enterprise IT Trends