Dark Reading Daily -- February 08, 2021

Security Researchers Push for 'Bug Bounty Program of Last Resort'

An international program that pays out hefty sums for the discovery of software vulnerabilities could spur greater scrutiny of applications and lead to better security.

Spotify Hit With Another Credential-Stuffing Attack

This marks the second credential-stuffing attack to hit the streaming platform in the last few months.

Cybercrime Goes Mainstream

Organized cybercrime is global in scale and the second-greatest risk over the next decade.

Security in a Complex World

Innovation and complexity can co-exist; the key is to use innovation to make ever-expanding complexity comprehensible and its effects predictable.

Microsoft Says It's Time to Attack Your Machine-Learning Models

With access to some training data, Microsoft's red team recreated a machine-learning system and found sequences of requests that resulted in a denial-of-service.

Web Application Attacks Grow Reliant on Automated Tools

Attackers often use automation in fuzzing attacks, injection attacks, fake bots, and application DDoS attacks.

Interview With a Russian Cybercriminal

A LockBit ransomware operator shared with researchers why he became involved in cybercrime, how he chooses victims, and what's in his toolbox.

What I Wish I Knew at the Start of My InfoSec Career

Security pros identify lessons learned that impact how they view infosec today.

Strengthening Zero-Trust Architecture

Organizations that want to stay ahead of cybercriminals will find that going beyond user trust and device trust is critical for outwitting their adversaries.

EDITORS' CHOICE

7 Steps to Secure a WordPress Site

Many companies operate under the assumption that their WordPress sites are secure -- and that couldn't be anything further from the truth.

An Observability Pipeline Could Save Your SecOps Team

Traditional monitoring approaches are proving brittle as security operations teams need better visibility into dynamic environments.

LATEST FROM THE EDGE

AI and APIs: The A+ Answers to Keeping Data Secure and Private

Many security leaders view regulations and internal processes designed to manage and secure data as red tape that hampers innovation. Nothing could be further from the truth.

2021 Top Enterprise IT Trends