Dark Reading Daily -- July 30, 2021

US Government Unlikely to Ban Ransomware Payments

The Department of Justice believes that banning ransom payments will cause greater havoc. However, the agency has called for incident reporting to be required.

Chinese-Speaking Threat Actor Using Unknown Rootkit in Targeted Attacks

Security vendor says it first spotted 'GhostEmperor' when investigating attacks targeting Microsoft Exchange flaws.

Corporate Mismanagement Contributing to Cybersecurity Hiring Challenges

Lack of competitive compensation and unrealistic requirements are impeding the ability to acquire qualified cybersecurity staff, a new survey shows.

How Adversaries Still Target Microsoft Active Directory 20 Years Later

Attack paths allow adversaries to reliably take control of nearly every Active Directory in the world.

Why Your People Are the Best Untapped Security Strategy

To elevate your security strategy, hire skilled security talent while establishing a security-centric culture among employees.

Phishing, Viruses Continue to Dominate the Malware Landscape

Despite concerns over widely publicized ransomware and supply chain attacks, most enterprises report that phishing attacks and viruses are the most common threats they face.

Babuk Coding Errors Make Data Recovery 'Impossible'

The ransomware group's decryption tool is poorly designed and coded, leading the group to focus more on data theft rather than encryption, researchers report.

Lower-Level Employees Become Top Spear-Phishing Targets

Cybercriminals seek employees who will be a "weak link" in the organization when designing phishing attacks, a new report finds.

8 Security Tools to be Unveiled at Black Hat USA

Security researchers and practitioners share a host of new cyber tools for penetration testing, reverse engineering, malware defense, and more.

Managing Increased Cyber-Physical Security Threats in a Hyper-Connected World

Physical security and cybersecurity can't be managed separately.

Top Security Leaders Share Management Tips, Lessons, and Stories

A panel of experts from Microsoft, Twitter, Cisco, and MongoDB share their thoughts on non-technical CISOs, managing through crises, and how they wish people communicated with them.

EDITORS' CHOICE

Data Breach Cost Hits Record High of $4.24M

The per-breach cost represents a 10% increase from the average cost per incident recorded one year prior, IBM reports.

How We Can Start Winning the Cyber War

Government and industry must work hand-in-hand to execute a winning game plan against cyber terrorists.

LATEST FROM THE EDGE

101: Why BGP Hijacking Just Won't Die

A look at the dangers of attacks on the Internet's Border Gateway Protocol and what ISPs and enterprises can do about them.

The State of Cybersecurity Incident Response