Dark Reading Daily -- March 29, 2021

SolarWinds Experimenting With New Software Build System in Wake of Breach

CISO of SolarWinds now has complete autonomy to stop product releases if security concerns exist, CEO says.

Microsoft Shares Exchange Server Post-Compromise Attack Activity

Microsoft shares the details of post-exploitation attack activity, including multiple ransomware payloads and a cryptocurrency botnet.

Moving from DevOps to CloudOps: The Four-Box Problem

With SOC teams running services on multiple cloud platforms, their big concern is how to roll up configuration of 200+ servers in a comprehensive way.

Data Bias in Machine Learning: Implications for Social Justice

Take historically biased data, then add AI and ML to compound and exacerbate the problem.

Apple Patches iOS Zero-Day

Apple today released iOS 14.4.2 to address a security vulnerability that may have been actively exploited.

40% of Apps Leaking Information

Apps in manufacturing most at risk, according to WhiteHat Security.

Researchers Discover Two Dozen Malicious Chrome Extensions

Extensions are being used to serve up unwanted adds, steal data, and divert users to malicious sites, Cato Networks says.

The CIO's Shifting Role: Improving Security With Shared Responsibility

CIOs must create a culture centered around cybersecurity that is easily visible and manageable.

Disrupting the Cybercriminal Supply Chain

It is time to turn the tables on cybercriminals and use their own tactics against them.

EDITORS' CHOICE

Nearly Half of Popular Android Apps Built With High-Risk Components

Information leakage and applications asking for too many permissions were also major issues, according to a survey of more than 3,300 popular mobile applications.

How to Run a Successful Penetration Test

These seven tips will help ensure a penetration test improves your organization's overall security posture.

LATEST FROM THE EDGE

A Day in the Life of a DevSecOps Manager

"Most days are good days," says Rally Health's Ari Kalfus. But they sure are busy, he tells The Edge.

2021 Top Enterprise IT Trends