Dark Reading Daily -- March 22, 2018

Supply Chain Cyberattacks Surged 200% in 2017

Symantec's annual Internet Security Threat Report also shows that zero-day exploits fizzled and cryptocurrency mining exploded.

Gartner Expects 2018 IoT Security Spending to Reach $1.5 Billion

Regulations, breach concerns will push spending to over $3 billion by 2021, analyst firm says.

GandCrab Ransomware Goes 'Agile'

GandCrab ransomware's developers have iterated the code rapidly, researchers found.

Online Sandboxing: A Stash for Exfiltrated Data?

SafeBreach researchers extend leaky sandbox research to show how services like VirusTotal and Hybrid Analysis could be used to steal data from air-gapped systems.

How Serverless Computing Reshapes Security

The new division of responsibility moves some security concerns off a business's plate while changing priorities for other risks.

DHS Chief: Election Security Now Top Priority Among Critical Systems

Homeland Security Secretary Kirstjen Nielsen told Congress today that her department is working to assist states with their election systems' security.

Puerto Rico's Electric Utility Hacked in Weekend Attack

Service was disrupted but no customer records compromised, officials said.

Who Does What in Cybersecurity at the C-Level

As security evolve as a corporate priority, so do the roles and responsibilities of the executive team. These seven titles are already feeling the impact.

Russian APT Compromised Cisco Router in Energy Sector Attacks

DragonFly hacking team that targeted US critical infrastructure compromised a network router as part of its attack campaign against UK energy firms last year.

Azure Guest Agent Design Enables Plaintext Password Theft

Researchers find attackers can abuse the design of Microsoft Azure Guest Agent to recover plaintext administrator passwords.

EDITORS' CHOICE

7 Spectre/Meltdown Symptoms That Might Be Under Your Radar

The Spectre/Meltdown pair has a set of major effects on computing but there are impacts on the organization that IT leaders might not have considered in the face of the immediate problem.

SOC in Translation: 4 Common Phrases & Why They Raise Flags

By keeping an ear out for out for catchphrases like "Just ask Stu" or "I've got a bad feeling about this," CISOs can overcome the barriers that get between business leaders and their security teams.

How to Cope with the IT Security Skills Shortage