Dark Reading Daily -- October 18, 2022

Researchers Keep a Wary Eye on Critical New Vulnerability in Apache Commons Text

There's nothing yet to suggest CVE-2022-42889 is the next Log4j. But proof-of-concept code is available, and interest appears to be ticking up.

Disinformation Attacks Threaten US Midterm Elections

Foreign nations continue to target various US public entities and private industries with cyberattacks, but the coming midterms are driving more disinformation than hacking, say experts.

4 Stakeholders Critical to Addressing the Cybersecurity Workforce Gap

A cross-disciplinary effort of change is needed to attract new professionals in the coming decade.

Signal to Ditch SMS/MMS Messaging on Android

Main driver for the change: "Plaintext SMS messages are inherently insecure."

Tactics Tie Ransom Cartel Group to Defunct REvil Ransomware

Ransom Cartel ransomware-as-a-service operator blog claims to offer a new and improved version of REvil ransomware.

(Sponsored Article) 5 Signs That It's Time to Invest in Data Loss Prevention

Automation means more attacks. It also means smarter, easier-to-implement prevention techniques. Here are five signs it is time to put your own data loss prevention strategy into place.

Microsoft 365 Message Encryption Can Leak Sensitive Info

The default email encryption used in Microsoft Office's cloud version is leaky, which the company acknowledged but said it wouldn't fix.

Care and Feeding of the SOC's Most Powerful Tool: Your Brain

Once overloaded, our brains can't process information effectively, performance decreases, and even the simplest of tasks seem foreign.

7 IoT Devices That Make Security Pros Cringe

A look at everything from truly dumb smart devices to cool-looking IoT tech with huge cybersecurity and privacy implications.

Concerns Over Fortinet Flaw Mount; PoC Released, Exploit Activity Grows

The authentication bypass flaw in FortiOS, FortiProxy and FortiSwitchManager is easy to find and exploit, security experts say.

LATEST FROM THE EDGE

What Fast-Talkers Can Teach Us About Vetting Vendors

Here's how to differentiate vendors that can back up their words with solutions and those that cannot.

LATEST FROM DR TECHNOLOGY

The Risk of Stateful Anti-Patterns in Enterprise Internet Architecture

Excessive statefulness hurts the ability to scale networks, applications, and ancillary supporting infrastructure, thus affecting an entire service delivery chain's ability to withstand a DDoS attack.

Building the SOC of the Future