Dark Reading Daily -- May 26, 2021

Rise in Opportunistic Hacks and Info-Sharing Imperil Industrial Networks

Security researchers at Mandiant have seen an increasing wave of relatively simplistic attacks involving ICS systems - and attackers sharing their finds with one another - since 2020.

Russia Profiting from Massive Hydra Cybercrime Marketplace

An analysis of Bitcoin transactions from the Hydra marketplace show that the operators are locking sellers into Russian exchanges, likely fueling profits for local actors.

Cloud Compromise Costs Organizations $6.2M Per Year

Organizations reported an average of 19 cloud-based compromises in the past year, but most don't evaluate the security of SaaS apps before deployment.

Your Network's Smallest Cracks Are Now Its Biggest Threats

Bad actors have flipped the script by concentrating more on low-risk threats. Here's how to address the threat and the tactics.

The Adversary Within: Preventing Disaster From Insider Threats

Insiders are in a position of trust, and their elevated permissions provide opportunities to cause serious harm to critical business applications and processes.

MacOS Zero-Day Let Attackers Bypass Privacy Preferences

Apple has released security patches for vulnerabilities in macOS and tvOS that reports indicate have been exploited in the wild.

Russian Sentenced to 30 Months for Running Criminal Website

FBI says sales from illicit online shop deer.io exceeded $17 million

Cloud Security Blind Spots: Where They Are and How to Protect Them

Security experts discuss oft-neglected areas of cloud security and offer guidance to businesses working to strengthen their security posture.

How to Get Employees to Care About Security

Want to a security awareness program that sticks? Make it fun and personal -- and offer free lunch.

Cyber Insurance Firms Start Tapping Out as Ransomware Continues to Rise

A global insurance carrier refuses to write new ransomware policies in France, while insurers rewrite policies. Are we heading toward a day when ransomware incidents become uninsurable?

EDITORS' CHOICE

As Threat Hunting Matures, Malware Labs Emerge

By leveraging their analysis outputs, security pros can update detection rules engines and establish a stronger security posture in the process.

Don't Let Scary Headlines Shape Your Company's Cyber-Resilience Strategy

Resilience planning should be based on data and backed by technology, cybersecurity pros agreed at this week's RSA Conference.

LATEST FROM THE EDGE

The Makings of a Better Cybersecurity Hire

Experience counts, but as one CISO has learned, don't overlook a creative, motivated candidate just because their background doesn't match the job description.

2021 Top Enterprise IT Trends