Dark Reading Daily -- June 05, 2019

Robbinhood: Inside the Ransomware That Slammed Baltimore

Attackers appear to have used a ransomware-as-a-service platform to wage the attack.

Carbanak Attack: Two Hours to Total Compromise

Investigation of the cybercrime group's attack on an East European bank shows how some attackers require very little time to broaden their access and establish persistence on a network.

How Today's Cybercriminals Sneak into Your Inbox

The tactics and techniques most commonly used to slip past security defenses and catch employees off guard.

Adware Hidden in Android Apps Downloaded More Than 440 Million Times

The heavily obfuscated adware was found in 238 different apps on Google Play.

Medical Debt Collector Breach Highlights Supply Chain Dangers

The breach of the website of American Medical Collection Agency leaves the personal and financial information of nearly 12 million patients at risk.

Why FedRAMP Matters to Non-Federal Organizations

Commercial companies should explore how FedRAMP can help mitigate risk as they move to the cloud.

2.8 Billion US Consumer Records Lost in 2018

Healthcare breaches grew 400%, study shows.

Imperva Snaps Up Distil Networks for API, App Security

Distil Networks' technology will be integrated into Imperva's security stack following the acquisition.

8 Ways to Authenticate Without Passwords

Passwordless authentication has a shot at becoming more ubiquitous in the next few years. We take a look at where things stand at the moment.

Docker Vulnerability Opens Servers to Container Code

Under very specific conditions, code running in a Docker container could access files anywhere on a server, according to a new CVE.

Microsoft Urges Businesses to Patch 'BlueKeep' Flaw

Fearing another worm of WannaCry severity, Microsoft warns vulnerable users to apply the software update for CVE-2019-0708.

EDITORS' CHOICE

7 Container Components That Increase a Network's Security

A proof of concept at Interop19 showed just how simple a container deployment can be.

What Cyber Skills Shortage?

Employers can solve the skills gap by first recognizing that there isn't an archetypal "cybersecurity job" in the same way that there isn't an archetypal "automotive job." Here's how.

Building and Managing an IT Security Operations Program