Dark Reading Daily -- April 18, 2019

VPN Vulnerabilities Point Out Need for Comprehensive Remote Security

VPNs are the primary tool for securing remote access, but recently disclosed vulnerabilities point out the weakness of relying on them as the only tool.

Ever-Sophisticated Bad Bots Target Healthcare, Ticketing

From criminals to competitors, online bots continue to scrape information from sites and pose as legitimate users.

Nation-State Hacker Group Hijacking DNS to Redirect Email, Web Traffic

'Sea Turtle' group has compromised at least 40 national security organizations in 13 countries so far, Cisco Talos says.

Tips for the Aftermath of a Cyberattack

Incident response demands technical expertise, but you can't fully recover without non-IT experts.

New Malware Campaign Targets Financials, Retailers

The attack uses a legitimate remote access system as well as several families of malware.

Selecting the Right Strategy to Reduce Vulnerability Risk

There's no one-size-fits-all strategy for eliminating vulnerability risk. Knowing how your organization operates is what makes the difference.

Inside the Dark Web's How-To Guides for Teaching Fraud

A new study investigates nearly 30,000 guides to explore what fraudsters sell and teach aspiring cybercriminals.

8 'SOC-as-a-Service' Offerings

These new cloud services seek to help companies figure out what their traditional SIEM alerts mean, plus how they can prioritize responses and improve their security operations.

The Single Cybersecurity Question Every CISO Should Ask

The answer can lead to a scalable enterprise security solution for 2019 and beyond.

Decoding a 'New' Elite Cyber Espionage Team

Stealthy and well-heeled hacking group went undetected for five years and wields a massive attack framework of some 80 different modules.

EDITORS' CHOICE

7 Tips for an Effective Employee Security Awareness Program

Breaches and compliance requirements have heightened the need for continuous and effective employee training, security experts say.

Legacy Apps: The Security Risk Lurking in Dusty Corners

Four best practices to keep old code from compromising your enterprise environment.

5 Emerging Cyber Threats to Watch for in 2019