Dark Reading Daily -- October 26, 2021

SolarWinds Attacker Targets Cloud Service Providers in New Supply Chain Threat

Microsoft says the group has attacked more than 140 service providers and compromised 14 of them between May and October of this year.

Who's In Your Wallet? Exploring Mobile Wallet Security

Security flaws in contactless payments for transportation systems could lead to fraud for stolen devices, researchers find.

Wardrivers Can Still Easily Crack 70% of Wi-Fi Passwords

Weaknesses in the current Wi-Fi standard and poorly chosen passwords allowed one wardriver to recover 70% of wireless network passwords.

How We Can Narrow the Talent Shortage in Cybersecurity

Filling crucial roles in cybersecurity and addressing the talent shortage requires rethinking who qualifies as a "cybersecurity professional" and rewriting traditional job descriptions.

(Sponsored Article) What Does Better Insider Risk Management Look Like?

Conventional data security tools do not address insider risk — a growing problem in today's remote-hybrid world. We need a better way to manage insider risk.

Industrial Goods & Services Tops Ransomware Targets in 2021

While the industrial goods and services sector saw a decline in attacks during the third quarter, it remains the most targeted sector for ransomware this year.

What Squid Game Teaches Us About Cybersecurity

When life inside the security operations center feels treacherous, here are some suggestions for getting out alive.

'TodayZoo' Phishing Kit Cobbled Together From Other Malware

Microsoft's analysis of a recent phishing attack shows how cybercriminals are mixing and matching to efficiently develop their attack frameworks.

Deepfake Audio Scores $35M in Corporate Heist

A combination of business email compromise and deepfake audio led a branch manager to transfer millions to scammers, in a case that serves as a warning to organizations.

7 Ways to Lock Down Enterprise Printers

Following the PrintNightmare case, printer security has become a hot issue for security teams. Here are seven ways to keep printers secure on enterprise networks.

LATEST FROM THE EDGE

5 Ways CMMC Security Requirements May Impact Universities

The Cybersecurity Maturity Model Certification puts research universities in a position where they must validate the effectiveness of their security controls before applying for a grant or bidding on a government contract.

LATEST FROM DR TECHNOLOGY

Proposed HTTPA Protocol Uses TEEs to Secure the Web

Intel researchers describe how Trusted Execution Environments can enhance HTTPS and boost Web security.

How Enterprises are Attacking the Cybersecurity Problem