Dark Reading Daily -- November 17, 2022

Thousands of Amazon RDS Snapshots Are Leaking Corporate PII

A service that allows organizations to back up data in the cloud can accidentally leak sensitive data to the public Internet, paving the way for abuse by threat actors.

MITRE Engenuity Launches Evaluations for Security Service Providers

The results are labor-intensive to parse, so knowing how to interpret them is key, security experts say.

China-Based Billbug APT Infiltrates Certificate Authority

Access to digital certificates would allow the Chinese-speaking espionage group to sign its custom malware and skate by security scanners.

Ukraine's 'IT Army' Stops 1,300 Cyberattacks in 8 Months of War

President Zelensky offers hard-won Ukrainian cybersecurity expertise to other countries that want to protect citizen populations.

BoostSecurity Emerges From Stealth With SaaS DevSecOps Platform

Fresh startup BoostSecurity has an SaaS platform for developers and security teams that provides automated tools to shore up cybersecurity within the software supply chain.

Cybersecurity Best Practice Is Critical for Winning the New Space Race

The race is actually a relay — one that requires collaboration to win.

New Ransomware Data Is In: What's Happening and How to Fight Back

Be proactive about data defense. Start with the right data, leverage domain expertise, and create models that help you target the most critical vulnerabilities.

Misconfigurations, Vulnerabilities Found in 95% of Applications

Weak configurations for encryption and missing security headers topped the list of software issues found during a variety of penetration and application security tests.

How Routine Pen Testing Can Reveal the Unseen Flaws in Your Cybersecurity Posture

Testing is an ongoing mission, not a one-and-done fix.

Evolving Security for Government Multiclouds

As the threat landscape increases, public cloud security needs to evolve.

Wipermania: Malware Remains a Potent Threat, 10 Years Since 'Shamoon'

An in-depth analysis of system-destroying malware families presented at Black Hat Middle East & Africa shows a growing nuance in terms of how they're deployed.

LATEST FROM THE EDGE

Are We Ready for AI-Generated Code?

Autocompleted code is convenient and quick, but it may expose your organization to security and compliance risks.

LATEST FROM DR TECHNOLOGY

Swimlane Introduces Low-Code, Automation Approach to OT Security

Automating security for OT infrastructure can help organizations combat a rising volume of cyber threats in an era when security professionals are in short supply.

Creating an Effective Incident Response Plan