Dark Reading Weekly -- September 03, 2020

Testing & Automation Pay Off for NSA's DevSecOps Project

Communication with stakeholders, extensive testing, and robust automation pays dividends for military intelligence agency, one of several presenters at GitLab's virtual Commit conference.

The Hidden Costs of Losing Security Talent

One person's exit can set off a chain of costly events.

Data Privacy Concerns, Lack of Trust Foil Automated Contact Tracing

Efforts to create a technology framework for alerting people to whether they have been exposed to an infectious disease have been hindered by a number of key issues.

New Threat Activity by Lazarus Group Spells Trouble for Orgs

The North Korea-backed group has launched several campaigns to raise revenue for cash-strapped nation's missile program, security experts say.

Why Kubernetes Clusters Are Intrinsically Insecure (& What to Do About Them)

By following best practices and prioritizing critical issues, you can reduce the chances of a security breach and constrain the blast radius of an attempted attack. Here's how.

Redefining What CISO Success Looks Like

Key to this new definition is the principle that security programs are designed to minimize business risk, not to achieve 100% no-risk.

COVID-19: Latest Security News & Commentary

Check out Dark Reading's updated, exclusive news and commentary surrounding the coronavirus pandemic.

Ransomware Red Flags: 7 Signs You're About to Get Hit

Caught off guard by a ransomware attack? Security experts say the warning signs were there all along.

'Transparent Tribe' APT Group Deploys New Android Spyware for Cyber Espionage

The group, which has been around since at least 2013, has impacted thousands of organizations, mostly in India.

Is China the World's Greatest Cyber Power?

While the US, Russia, Israel, and several European nations all have sophisticated cyber capabilities, one threat intelligence firm argues that China's aggressive approach to cyber operations has made it "perhaps the world's greatest cyber power."

EDITORS' CHOICE

5 Tips for Triaging Risk from Exposed Credentials

Not all exposed usernames and passwords present a threat. Here's how to quickly identify the ones that do.

Why Are There Still So Many Windows 7 Devices?

As the FBI warns, devices become more vulnerable to exploitation as time passes, due to a lack of security updates and new, emerging vulnerabilities.

NEW FROM THE EDGE

Hypothesis: Cyber Attackers Are After Your Scientific Research

From COVID-19 treatment to academic studies, keeping research secure is more important than ever. The ResearchSOC at Indiana University intends to help.

7 New Cybersecurity Vulnerabilities That Could Put Your Enterprise at Risk