Dark Reading Daily -- September 10, 2021

REvil Ransomware Group's Sudden Re-emergence Sparks Concerns

Some had hoped the notorious Russia-based group had been pressured to quit for good after a couple of especially egregious attacks on US targets earlier this year.

Microsoft Warns of Vuln That Allowed Access to Azure Infrastructure

Microsoft ran a five-year-old component that allowed vulnerability researchers to punch through the isolation that normally protects cloud tenants, researchers found.

Researchers Play Leading Role in Detecting Cloud Misconfiguration

A new report finds 62% of cloud misconfiguration incidents are reported by independent researchers before criminals can find them.

In the Hybrid Future, Secure Everything Like You're Never Going Back

Security practices must change to reflect the reality that remote/hybrid work is the new norm. Here are three risk mitigation measures for a remote-first world.

First Initiatives for the First National Cyber Director

The US appointed Chris Inglis as the first National Cyber Director (NCD). Here are three key problems he must now address.

33% of Reported Phishing Emails Prove Malicious or Suspect

A new analysis from F-Secure details commonly used phishing phrases and methods seen in attacks.

Sidewalk Malware Tied to China-Linked Espionage Group

The Sidewalk backdoor has been connected to the Grayfly espionage group and seen in attacks in Asia and North America.

Attackers Moving Faster Inside Target Networks

Criminals begin moving laterally inside a target network within 92 minutes of gaining access and demonstrate new stealthy capabilities, a new report shows.

Hackers Shut Down a Pipeline. How Should the Energy Sector Respond?

With all eyes on cybersecurity, the energy and utilities industries are adopting zero-trust frameworks. Here are three key steps to implementing zero trust for critical industries.

Major New OpenSSL Released

A key part of the cryptographic infrastructure of the Internet, OpenSSL has turned 3.0, but rival Rust-based TLS, Rustls, promises to head off future security vulnerabilities.

EDITORS' CHOICE

Cybercriminals See Bountiful Harvest in Food Supply Chain

Agriculture and food companies are seeing increased attacks from ransomware groups targeting the industry, prompting the DoJ and security firms to issue warnings.

I Moved to Cybersecurity After a Decade in Finance — Here's How You Can Too

The cybersecurity industry needs employees with nontraditional backgrounds who can offer fresh perspectives. Here are tips for making a career switch to this growing and exciting field.

LATEST FROM THE EDGE

How to Bust Through Barriers for a More Diverse Cybersecurity Workforce

Diversity is the topic du jour, but cybersecurity professionals of color still face a lot of hurdles to enter and grow within the industry. Organizations such as Blacks in Cybersecurity are providing some of these under-represented groups with a voice.

Enterprise Cybersecurity Plans in a Post-Pandemic World