Dark Reading Daily -- March 20, 2020

VPN Usage Surges as More Nations Shut Down Offices

As social distancing becomes the norm, interest in virtual private networks has rocketed, with some providers already seeing a doubling in users and traffic since the beginning of the year.

TA505 Targets HR Departments with Poisoned CVs

Infamous cybercrime organization spotted in attacks that employ legitimate software -- and Google Drive.

New Study Calls Common Risk Figure into Question

Many risk models use a commonly quoted number -- $150 per record -- to estimate the cost of an incident. A new study from the Cyentia Institute says misusing that number means that estimates are almost never accurate.

Cyber Resilience Benchmarks 2020

Here are four things that separate the leaders from the laggards when fighting cyber threats.

Achieving DevSecOps Requires Cutting Through the Jargon

Establishing a culture where security can work easily with developers starts with making sure they can at least speak the same language.

Misconfigured Elasticsearch Instance Exposes More Than 5 Billion Records

The collections contained information collected by a UK research firm on data breaches from the years 2012 to 2019.

DDoS Attack Targets German Food Delivery Service

Liefrando delivers food from more than 15,000 restaurants in Germany, where people under COVID-19 restrictions depend on the service.

What Cybersecurity Pros Really Think About Artificial Intelligence

While there's a ton of unbounded optimism from vendor marketing and consultant types, practitioners are still reserving a lot of judgment.

Report: Shadow IoT Emerging as New Enterprise Security Problem

Much of the traffic egressing enterprise networks are from poorly protected Internet-connected consumer devices, a Zscaler study finds.

Privacy in a Pandemic: What You Can (and Can't) Ask Employees

Businesses struggle to strike a balance between workplace health and employees' privacy rights in the midst of a global health emergency.

EDITORS' CHOICE

Security Lessons We've Learned (So Far) from COVID-19

Takeaways about fighting new fires, securely enabling remote workforces, and human nature during difficult times.

What the Battle of Britain Can Teach Us About Cybersecurity's Human Element

During WWII, the British leveraged both technology and human intelligence to help win the war. Security leaders must learn the lessons of history and consider how the human element can make their machine-based systems more effective.

NEW FROM THE EDGE

Quantifying Cyber Risk: Why You Must & Where to Start

Quantifying cybersecurity risks can be a critical step in understanding those risks and getting executive support to address them.

6 Emerging Cyber Threats That Enterprises Face in 2020