Dark Reading Daily -- September 30, 2020

State-Sponsored Hacking Groups Increasingly Use Cloud & Open Source Infrastructure

Microsoft shuts down Azure Active Directory instances used by attackers to evade detection and warns that the use of open source tools by espionage groups is growing.

Microsoft: Ransomware & Nation-State Attacks Rise, Get More Sophisticated

Malware-based attacks are out, phishing is in, along with credential stuffing and business email compromise. Microsoft recommends defensive tactics in its new report on rising threats.

New Campaign by China-Linked Group Targets US Orgs for First Time

In a least one instance, the Palmerworm APT group was able to remain undetected on a compromised system for nearly six months, according to Symantec.

The Shared Irresponsibility Model in the Cloud Is Putting You at Risk

Step up, put the architecture and organization in place, and take responsibility. If you don't, who will?

Vulnerability in Wireless Router Chipsets Prompts Advisory

Synopsys issues an advisory for vulnerabilities affecting the chipsets of wireless routers from Qualcomm, Mediatek, and Realtek.

DDoS Attacks Soar in First Half of 2020

Shorter, faster, multivector attacks had a greater impact on victims.

(Sponsored Article) Cyber Resilience Is Essential for Successful Digital Transformation

The pace of digital transformation and cyber resilience has increased over the last several years. Are you keeping up?

New Google Search Hacks Push Viruses & Porn

Three incidents demonstrate how cybercriminals leverage the scourge of black-hat search engine optimization to manipulate search results.

6 Things to Know About the Microsoft 'Zerologon' Flaw

Until all domain controllers are updated, the entire infrastructure remains vulnerable, the DHS' CISA warns.

MFA-Minded Attackers Continue to Figure Out Workarounds

While MFA can improve overall security posture, it's not a "silver bullet" -- and hacks continue.

EDITORS' CHOICE

9 Tips to Prepare for the Future of Cloud & Network Security

Cloud and network security analysts outline trends and priorities businesses should keep top of mind as they grow more reliant on cloud.

Shifting Left of Left: Why Secure Code Isn't Always Quality Code

Enabling engineers to share responsibility for security and empowering them to erase common vulnerabilities are good starting points.

NEW FROM THE EDGE

Securing Slack: 5 Tips for Safer Messaging, Collaboration

Remote workers and scattered teams are relying on Slack more and more for messaging and collaboration. Here are a few extra tips for keeping data and systems more secure when using Slack.

RASP 101: Staying Safe With Runtime Application Self-Protection

The dream of RASP is to empower applications to protect themselves. How close do current implementations get to living the dream? Here's what to know.

Special Report: Computing's New Normal