Dark Reading Weekly -- December 09, 2021

USB Devices the Common Denominator in All Attacks on Air-Gapped Systems

A new study of 17 malware frameworks shows threat actors always use USB drives to sneak malware into air-gapped environments and then steal data from there.

Virtual-Network Vulnerability Found in AWS, Other Clouds

The privilege-escalation flaws affect Amazon WorkSpaces and more than a dozen services that use a particular implementation of USB over Ethernet.

The Dark Web Has Its Own People's Court

Many underground forums have processes for arbitrating disputes between cybercriminals.

Newly Found Authentication Flaws Highlight Dangers of Coding From Scratch

Two vulnerabilities in a call-center software suite could allow an attacker to take over the application server, researchers found.

Why Cloud Service Providers Are a Single Point of Failure

In a matter of days, a large-scale outage of cloud and other online services could cause $15 billion in losses.

5 Tips to Stay on the Offensive and Safeguard Your Attack Surface

New, global-scale attacks aren't a security problem; they're a big data problem requiring a data-led solution.

Cybersecurity Takes the Wheel as Auto Industry's Top Priority

Part mainframe, part mobile device, cars will increasingly become targets for cyberattackers.

Defending Against the Use of Deepfakes for Cyber Exploitation

Deepfakes are increasingly concerning because they use AI to imitate human activities and can be used to augment social engineering attacks.

Breaking the Black Mirror and Other Lessons From Day of Shecurity

Diversity brings more varied solutions to major challenges in cybersecurity, just as it does in every other industry.

An Insider's Account of Disclosing Vulnerabilities

Vendors drag their heels when it comes to identifying software vulnerabilities and are often loath to expedite the fixes.

Key Characteristics of Malicious Domains: Report

Newer top-level domains and certain hosting providers are frequent sources of malicious content, while newly registered domains and free SSL certificates are not any more likely than average to be risky, new research shows.

Russian Actors Behind SolarWinds Attack Hit Global Business & Government Targets

Clusters of activity associated with the attack group behind last year's supply chain breach reveal novel techniques, researchers say.

Finding Your Niche in Cybersecurity

With a little patience and research, you can discover a role you love that also protects those around you.

EDITORS' CHOICE

In Appreciation: Dark Reading's Tim Wilson

Dark Reading co-founder and editor-in-chief Tim Wilson passed away on Nov. 23.

LATEST FROM THE EDGE

How Criminals Are Using Synthetic Identities for Fraud

Organizations must improve their cybersecurity protocols to detect fraudulent identities and make sure they're safeguarding their consumers’ personal information.

LATEST FROM DR TECHNOLOGY

Rubrik's New Managed Service Protects Data From Ransomware Attacks

Rubrik Cloud Vault provides data recovery assurance against ransomware attacks for Microsoft Azure customers, even if they maintain a hybrid environment.

How Data Breaches Affect the Enterprise