Dark Reading Weekly -- February 10, 2022

Threat Actors Revive 20-Year-Old Tactic in Microsoft 365 Phishing Attacks

Recent attacks involving so-called "right-to-left override" spoofing aimed at Microsoft 365 users show how attackers sometimes modify and improve old methods to try and stay one step ahead of defenders.

Experts: Several CVEs from Microsoft's February Security Update Require Prompt Attention

Microsoft's release of relatively sparse vulnerability information makes it difficult for organizations to prioritize mitigation efforts, security experts say.

Linux Malware on the Rise

Ransomware, cryptojacking, and a cracked version of the penetration-testing tool Cobalt Strike have increasingly targeted Linux in multicloud infrastructure, report states.

Vulnerability Scanning Triples, Leading to Two-Thirds Fewer Flaws

Companies are scanning more applications for vulnerabilities — and more often.

Russian APT Steps Up Malicious Cyber Activity in Ukraine

Actinium/Gameredon's attacks are another reminder of why organizations need to pay additional scrutiny to systems in the region.

China-Linked Group Attacked Taiwanese Financial Firms for 18 Months

The Antlion group, also known as Pirate Panda and Tropic Trooper, has shifted to targeting mainly Taiwan, using custom backdoors against financial organizations.

Log4j and the Role of SBOMs in Reducing Software Security Risk

Enterprises are spending a pittance on securing their software supply chain, which makes COTS software dangerous — vulnerabilities can be "hidden" in open source components.

Cyber Terrorism Is a Growing Threat & Governments Must Take Action

With its benefits of deniability, relatively low costs, and the ability to attack from anywhere, cyber terrorism will increasingly threaten civilians everywhere.

Want to Be an Ethical Hacker? Here's Where to Begin

By utilizing these resources, beginner hackers can find their specific passions within the cybersecurity space and eventually make their own mark in the ethical hacking profession.

Expert Insights: Training the Data Elephant in the AI Room

Be aware of the risk of inadvertent data exposure in machine learning systems.

Hackers Went Wild in 2021 — Every Company Should Do These 5 Things in 2022

Practical steps companies can take to defend their critical infrastructure and avoid the financial and reputational damage that could result from a breach.

Name That Edge Toon: Head of the Table

Come up with a clever caption, and our panel of experts will reward the winner with a $25 Amazon gift card.

How Enterprises Are Assessing Cybersecurity Risk in Today's Environment