Dark Reading Weekly -- October 01, 2020

State-Sponsored Hacking Groups Increasingly Use Cloud & Open Source Infrastructure

Microsoft shuts down Azure Active Directory instances used by attackers to evade detection and warns that the use of open source tools by espionage groups is growing.

Cloud Misconfiguration Mishaps Businesses Must Watch

Cloud security experts explain which misconfigurations are most common and highlight other areas of the cloud likely to threaten businesses.

The No Good, Very Bad Week for Iran's Nation-State Hacking Ops

A look at the state of Iran's cyber operations as the US puts the squeeze on it with a pile of indictments and sanctions.

6 Things to Know About the Microsoft 'Zerologon' Flaw

Until all domain controllers are updated, the entire infrastructure remains vulnerable, the DHS' CISA warns.

Attacker Dwell Time: Ransomware's Most Important Metric

How to bolster security defenses by zeroing in on the length of time an interloper remains undetected inside your network.

Since Remote Work Isn't Going Away, Security Should Be the Focus

These three steps will help organizations reduce long-term work-from-home security risks.

(Sponsored Article) CISO Conversations: Moving OT Development to the Cloud

OT development hasn't kept pace with advances in IT development. The key issue: how to securely connect industrial control systems to a cloud environment.

New Google Search Hacks Push Viruses & Porn

Three incidents demonstrate how cybercriminals leverage the scourge of black-hat search engine optimization to manipulate search results.

MFA-Minded Attackers Continue to Figure Out Workarounds

While MFA can improve overall security posture, it's not a "silver bullet" -- and hacks continue.

Microsoft: Ransomware & Nation-State Attacks Rise, Get More Sophisticated

Malware-based attacks are out, phishing is in, along with credential stuffing and business email compromise. Microsoft recommends defensive tactics in its new report on rising threats.

EDITORS' CHOICE

9 Tips to Prepare for the Future of Cloud & Network Security

Cloud and network security analysts outline trends and priorities businesses should keep top of mind as they grow more reliant on cloud.

A Guide to the NIST Cybersecurity Framework

With cybersecurity threats growing exponentially, it has never been more important to put together an efficient cyber-risk management policy, and NIST's framework can help.

NEW FROM THE EDGE

Securing Slack: 5 Tips for Safer Messaging, Collaboration

Remote workers and scattered teams are relying on Slack more and more for messaging and collaboration. Here are a few extra tips for keeping data and systems more secure when using Slack.

What Legal Language Should I Look Out for When Selecting Cyber Insurance?

At times, vague coverage can actually work for you.

Special Report: Computing's New Normal