Dark Reading Daily -- October 27, 2020

The Story of McAfee: How the Security Giant Arrived at a Second IPO

Industry watchers explore the story of McAfee, from its founding in 1987, to its spinoff from Intel, to how it's keeping up with competitors.

Neural Networks Help Users Pick More-Secure Passwords

Typically, blocklists are used to prevent users from picking easily guessable patterns, but a small neural network can do the same job and suggests that complex password requirements are not necessary.

Microsoft's Kubernetes Threat Matrix: Here's What's Missing

With a fuller picture of the Kubernetes threat matrix, security teams can begin to implement mitigation strategies to protect their cluster from threats.

A Pause to Address 'Ethical Debt' of Facial Recognition

Ethical use will require some combination of consistent reporting, regulation, corporate responsibility, and adversarial technology.

Cybercriminals Extort Psychotherapy Patients Following Vastaamo Breach

An attacker is running a Tor site to leak the session notes of 300 patients at Vastaamo, a Finnish psychotherapy facility.

New Report Links Cybersecurity and Sustainability

Some have also created the role of chief sustainability officer, according to Kaspersky.

8 New and Hot Cybersecurity Certifications for 2020

While the usual security certs remain popular, interest in privacy skills and cloud experience are pushing new credentials into the market.

Botnet Infects Hundreds of Thousands of Websites

KashmirBlack has been targeting popular content management systems, such as WordPress, Joomla, and Drupal, and using Dropbox and GitHub for communication to hide its presence.

COVID-19: Latest Security News & Commentary

Check out Dark Reading's updated, exclusive news and commentary surrounding the coronavirus pandemic.

EDITORS' CHOICE

7 Mobile Browsers Vulnerable to Address-Bar Spoofing

Flaws allow attackers to manipulate URLs users see on their mobile devices, Rapid7 says.

A Pause to Address 'Ethical Debt' of Facial Recognition

Ethical use will require some combination of consistent reporting, regulation, corporate responsibility, and adversarial technology.

NEW FROM THE EDGE

Teach Your Employees Well: How to Spot Smishing & Vishing Scams

One of the best ways to keep employees from falling victim to these social-engineering attacks is to teach them the signs.

Special Report: Computing's New Normal