Dark Reading Daily -- December 06, 2018

Starwood Breach Reaction Focuses on 4-Year Dwell

The unusually long dwell time in the Starwood breach has implications for both parent company Marriott International and the companies watching to learn from.

Windows 10 Security Questions Prove Easy for Attackers to Exploit

New research shows how attackers can abuse security questions in Windows 10 to maintain domain privileges.

Toyota Builds Open-Source Car-Hacking Tool

'PASTA' testing platform specs will be shared via open-source.

Former Estonian Foreign Minister Urges Cooperation in Cyberattack Attribution, Policy

Nations must band together to face nation-state cyberattack threats, said Marina Kaljurand.

Google Cloud Security Command Center Now in Beta

The beta release of Google Cloud SCC will include broader coverage across the cloud platform and more granular access controls, among other features.

Republican Committee Email Hacked During Midterms

The National Republican Congressional Committee detected the compromise of four staffers' email accounts in April.

A Shift from Cybersecurity to Cyber Resilience: 6 Steps

Getting to cyber resilience means federal agencies must think differently about how they build and implement their systems. Here's where to begin.

Filling the Cybersecurity Jobs Gap - Now and in the Future

Employers must start broadening their search for experienced security professionals to include people with the right traits rather than the right skills.

5 Emerging Trends in Cybercrime

Organizations can start today to protect against 2019's threats. Look out for crooks using AI "fuzzing" techniques, machine learning, and swarms.

MITRE Changes the Game in Security Product Testing

Nonprofit has published its first-ever evaluation of popular endpoint security tools - measured against its ATT&CK model.

EDITORS' CHOICE

6 Ways to Strengthen Your GDPR Compliance Efforts

Companies have some mistaken notions about how to comply with the new data protection and privacy regulation - and that could cost them.

The Case for a Human Security Officer

Wanted: a security exec responsible for identifying and mitigating the attack vectors and vulnerabilities specifically targeting and involving people.

10 Best Practices That Could Reshape Your IT Security Department