Dark Reading Daily -- April 28, 2020

Top 10 Cyber Incident Response Mistakes and How to Avoid Them

From lack of planning to rushing the closure of incidents, these mistakes seriously harm IR effectiveness.

Microsoft Patches Dangerous Teams Vulnerability

CyberArk says issue would have allowed attackers to take over Teams accounts using a malicious GIF.

Attackers Target Sophos Firewalls with Zero-Day

Remote exploit compromises specific configurations of XG firewalls with the intent of stealing data from the devices.

Cloud Services Are the New Critical Infrastructure. Can We Rely on Them?

If cloud services vendors successfully asked themselves these three questions, we'd all be better off.

COVID-19 Quarantine: A Unique Learning Opportunity for Defenders

Use these spare moments at home to master new skills that will help protect your organization and enhance your career.

Biopharmaceutical Firm Suffers Ransomware Attack, Data Dump

ExecuPharm said its internal servers were hit with ransomware after attackers launched a phishing attack.

Microsoft Advisory Warns of Vulnerabilities Affecting Office

The flaws exist in Autodesk's FBX Software Development Kit, which is supported in Microsoft Office 2019 and Office 365 ProPlus.

Automated Bots Are Increasingly Scraping Data & Attempting Logins

The share of bot traffic to online sites declines, but businesses are seeing an overall increase in automated scraping of data, login attempts, and other detrimental activity.

White-Hat Hackers Help 'Fold' COVID-19 Proteins

A grassroots effort provides scientists with computing power to help simulate the novel coronavirus' proteins and come up with therapeutic solutions for the disease.

Apple iOS Zero-Day Vulnerabilities Exploited in Targeted Attacks

One of the flaws is remotely exploitable with no user interaction needed, ZecOps says.

EDITORS' CHOICE

10 Standout Security M&A Deals from Q1 2020

The first quarter of 2020 brought investments in enterprise IoT and endpoint security, as well as billion-dollar investments from private equity firms.

How the Dark Web Fuels Insider Threats

New decentralized, criminal marketplaces and "as-a-service" offerings make it easy for employees to monetize their knowledge and access to enterprise networks and systems.

NEW FROM THE EDGE

Will the Pandemic Complicate Cyber Insurance Claims?

While quarantined workers are keeping safe at home, they could be jeopardizing your insurance policy.

6 Emerging Cyber Threats That Enterprises Face in 2020