Dark Reading Daily -- January 12, 2021

US Capitol Attack a Wake-up Call for the Integration of Physical & IT Security

How two traditionally disparate security disciplines can be united.

Intel's New vPro Processors Aim to Help Defend Against Ransomware

The newest Intel Core vPro mobile platform gives PC hardware a direct role in detecting ransomware attacks.

New Tool Sheds Light on AppleScript-Obfuscated Malware

The AEVT decompiler helped researchers analyze a cryptominer campaign that used AppleScript for obfuscation and will help reverse engineers focused on other Mac OS malware.

SolarWinds Hack Lessons Learned: Finding the Next Supply Chain Attack

The SolarWinds supply chain compromise won't be the last of its kind. Vendors and enterprises alike must learn and refine their detection efforts to find the next such attack.

When It Comes To Security Tools, More Isn't More

Organizations that focus on optimizing their tools, cutting down on tool sprawl, and taking a strategic approach to transitioning to the cloud are poised for success.

IoT Vendor Ubiquiti Suffers Data Breach

Cloud provider hosting "certain" IT systems attacked, company says.

Malware Developers Refresh Their Attack Tools

Cisco analyzes the latest version of the LokiBot malware for stealing credentials, finding that its developers have added more misdirection and anti-analysis features.

6 Open Source Tools for Your Security Team

Open source tools can be great additions to your cloud security arsenal. Here are a half-dozen to get you started.

How to Protect Your Organization's Digital Footprint

As the digital risk landscape evolves and grows, organizations must stay vigilant against online threats.

EDITORS' CHOICE

FireEye's Mandia: 'Severity-Zero Alert' Led to Discovery of SolarWinds Attack

CEO Kevin Mandia shared some details on how his company rooted out the major cyberattack campaign affecting US government and corporate networks.

Top 5 'Need to Know' Coding Defects for DevSecOps

Integrating static analysis into the development cycle can prevent coding defects and deliver secure software faster.

LATEST FROM THE EDGE

How the Shady Zero-Day Sales Game Is Evolving

Zero-day vulns are cold, while access-as-a-service is hot. Here's how black market (and gray market) deals go down.

2020: The Year in Security