Dark Reading Weekly -- November 30, 2017

Uber's Security Slip-ups: What Went Wrong

The ride-sharing company's decisions leading to a 2016 data breach and its handling of the incident should serve as a cautionary tale for enterprises facing a breach.

8 Low or No-Cost Sources of Threat Intelligence

Here's a list of sites that for little or no cost give you plenty of ideas for where to find first-rate threat intelligence.

First US Federal CISO Shares Security Lessons Learned

Greg Touhill's advice for security leaders includes knowing the value of information, hardening their workforce, and prioritizing security by design.

Time to Pull an Uber and Disclose Your Data Breach Now

There is never a good time to reveal a cyberattack. But with EU's GDPR looming, the fallout is only going to get harder and more expensive if you wait.

Git Some Security: Locking Down GitHub Hygiene

In the age of DevOps and agile development practices that lean heavily on GitHub and other cloud resources, strong controls are more important than ever.

Why Security Depends on Usability -- and How to Achieve Both

Any initiative that reduces usability will have consequences that make security less effective.

Name That Toon: 'Tis the Season

We provide the cartoon. You provide the caption.

6 Real Black Friday Phishing Lures

As the mega-shopping day approaches, here's a look at six examples of phishing attacks - and ways to avoid taking the bait.

New OWASP Top 10 List Includes Three New Web Vulns

But dropping cross-site request forgeries from list is a mistake, some analysts say.

3 Pillars of Cyberthreat Intelligence

Strong enterprise cybersecurity programs must be a built on a framework that incorporates strategic, operational, and tactical leadership and goals.

SAVE THE DATE

Complex Cyber Challenges: Hear Virginia Governor Terry McAuliffe, Michael Daniels

Back for its 14th year, the 2017 Symantec Government Symposium will convene 1,000 attendees on Dec. 5 at the Renaissance Hotel in Washington, D.C. to discuss today’s most pressing cyber issues. Join leading government cybersecurity thought leaders at this one day event to examine issues like cyber sabotage, insider threats, IT modernization, cyber-as-a-service, policy, IoT/next-gen technologies, and much more. We’ll also host an interactive hackathon where attendees can hone their cyber skills while earning continuing professional education credits. Register today for the cyber event of the year.

Managing Cyber-Risk