Dark Reading Daily -- August 23, 2021

US Census Bureau Failed Breach Response, Watchdog Says

The January 2020 compromise did not succeed but highlighted significant deficiencies in the security operations of the federal agency tasked with an accurate count of the population.

Adversarial Transferability and the Death of Security-by-Obscurity in the Age of AI

Why most CISOs are mistaken when they think that AI-based systems are a secure black box.

After Ransomware, Enterprises Most Worried About Phishing Attacks Post-Pandemic

While two-thirds of enterprises surveyed for Dark Reading and Omdia’s "2021 Enterprise Security in a Post-Pandemic World" report indicated cited ransomware as their top concern, more than half are also worried about new phishing attacks as attackers ramp up their activities in the wake of the COVID-19 pandemic.

Security Leaders Struggle to Handle COVID-Related Infosec Challenges

A Dark Reading and Omdia survey finds many leaders think their efforts to keep pace with security challenges are lacking.

T-Mobile Reports 5.3M More Affected in Data Breach

T-Mobile continues to investigate a breach that has now affected more than 50 million current, former, and prospective customers.

9 Tips for Hiring (and Keeping) Top Security Talent

Demand for security professionals continues to skyrocket. Here’s what organizations need to do to give themselves an edge in hiring and retaining the best talent out there.

Ransomware Attacker Offers Employees a Cut if They Install DemonWare on Their Organization's Systems

Researchers went undercover and posed as willing "insider threats" to expose and study an unusual hybrid BEC-style social engineering-ransomware scheme.

3 Misconceptions Around Cybersecurity Maturity Model Certification

Don't believe these myths surrounding CMMC compliance. Here's what organizations really need to know in order to work with the US Department of Defense.

EDITORS' CHOICE

ShadowPad Malware Platform Proves a Threat to Watch

Researchers who investigated the privately sold malware platform find a new controller -- and new implications for the Chinese espionage threat landscape.

4 Places Where Digital ID Models Falter

Good digital identity must be secure and unique, verified with high assurance, and privacy-preserving, along with individual user control and embedded consent.

LATEST FROM THE EDGE

How 5 Years of DEF CON's Voting Village Has Shaped Election Security

The hands-on and at times controversial live-hacking event now has a broader mission: year-round, open testing of election systems.

Enterprise Cybersecurity Plans in a Post-Pandemic World