Dark Reading Daily -- June 07, 2018

VPNFilter Poses Broader Threat Than First Thought; Endpoints At Risk Too

New research shows the router and NAS system malware affects more vendor devices as well, Cisco Talos says.

Operation Prowli Hits 40K with Traffic Monetization, Cryptomining

The campaign targets services including Drupal CMS sites, DSL modems, vulnerable IoT devices, and servers with an open SSH port.

Survey Shows Florida at the Bottom for Consumer Cybersecurity

A new survey shows that residents of the Sunshine State engage in more risky behavior than their counterparts in the other 49 states.

'Strutting' Past the Equifax Breach: Lessons Learned

In hindsight, there were two likely causes for last year's massive breach: the decision to use Apache Struts, and a failure to patch in a timely fashion. Both are still a recipe for disaster.

Tax-Season Malware Campaign Delivers Trojan Via Email

A new example of a long-term phenomenon delivers a banking trojan via a downloader activated by a URL in a phishing email.

Five Indicted for Conning Target, Shoppers Out of Nearly $800K

Members of a fraud ring were charged with compromising Target's internal gift-card system and defrauding customers out of almost $800,000.

Researcher Succesfully Hacked In-Flight Airplanes - From the Ground

IOActive researcher will demonstrate at Black Hat USA how satellite equipment can be 'weaponized.'

5 Tips for Protecting SOHO Routers Against the VPNFilter Malware

Most home office users need to simply power cycle their routers and disable remote access; enterprises with work-at-home employees should move NAS behind the firewall.

Dark Web Marketplaces Dissolve Post-AlphaBay, Hansa Takedown

Cybercrime marketplaces reshape into smaller forums and individual chats as threat actors find new ways to evade law enforcement.

EDITORS' CHOICE

10 Open Source Security Tools You Should Know

Open source tools can be the basis for solid security and intense learning. Here are 10 you should know about for your IT security toolkit.

DOD Looks to the Cloud for Browser Security

The US Department of Defense just published its cloud browser strategy. What's yours?

The Changing Role of the CISO