Dark Reading Daily -- September 03, 2020

The Hidden Costs of Losing Security Talent

One person's exit can set off a chain of costly events.

Facebook & Twitter Remove Russian Accounts Spreading Disinformation

The Russia-backed Internet Research Agency has returned with new strategies to sway voters ahead of the 2020 presidential election.

55% of Cybersquatted Domains Are Malicious or Potentially Fraudulent

The largest online companies, such as Apple and PayPal, and banks are being targeted by cybersquatters, who are also taking advantage of the pandemic, a study finds.

Don't Forget Cybersecurity on Your Back-to-School List

School systems don't seem like attractive targets, but they house lots of sensitive data, such as contact information, grades, health records, and more.

Most IoT Hardware Dangerously Easy to Crack

Manufacturers need to invest more effort into protecting root-level access to connected devices, security researcher says.

DHS Partners with Industry to Offer State, Local Gov'ts Cybersecurity Aid

The US Department of Homeland Security teams up with Akamai and the Center for Internet Security to provide state and local governments with cybersecurity through DNS for free.

New Jersey Man Sentenced to 7+ Years for Cyber Breaking & Entering

The man installed keyloggers, stealing credentials and information on emerging technology development.

'KryptoCibule' Uses Several Tricks to Maximize Cryptocurrency Theft

The malware family uses multiple tactics to steal as much cryptocurrency as possible while flying under the radar.

Ransomware Red Flags: 7 Signs You're About to Get Hit

Caught off guard by a ransomware attack? Security experts say the warning signs were there all along.

'Transparent Tribe' APT Group Deploys New Android Spyware for Cyber Espionage

The group, which has been around since at least 2013, has impacted thousands of organizations, mostly in India.

Testing & Automation Pay Off for NSA's DevSecOps Project

Communication with stakeholders, extensive testing, and robust automation pays dividends for military intelligence agency, one of several presenters at GitLab's virtual Commit conference.

EDITORS' CHOICE

5 Tips for Triaging Risk from Exposed Credentials

Not all exposed usernames and passwords present a threat. Here's how to quickly identify the ones that do.

Why Kubernetes Clusters Are Intrinsically Insecure (& What to Do About Them)

By following best practices and prioritizing critical issues, you can reduce the chances of a security breach and constrain the blast radius of an attempted attack. Here's how.

NEW FROM THE EDGE

Hypothesis: Cyber Attackers Are After Your Scientific Research

From COVID-19 treatment to academic studies, keeping research secure is more important than ever. The ResearchSOC at Indiana University intends to help.

7 New Cybersecurity Vulnerabilities That Could Put Your Enterprise at Risk