Dark Reading Daily -- May 20, 2020

Web Application Attacks Double from 2019: Verizon DBIR

Verizon's annual data breach report shows most attackers are external, money remains their top motivator, and web applications and unsecured cloud storage are hot targets.

Unpatched Open Source Libraries Leave 71% of Apps Vulnerable

PHP and JavaScript developers need to pay close attention because different languages and frameworks have different rates of vulnerability, research finds.

Magecart Plants Card Skimmers via Old Magento Plugin Flaw

The FBI has warned ecommerce sites about attacks targeting a more than three-year-old flaw in the Magmi mass importer.

Hackers Hit Food Supply Company

The attackers behind the REvil ransomware family has also threatened to release personal data on Madonna and other celebrities to the highest bidders.

Long-Term Remote Work: Keeping Workers Productive & Secure

The pandemic has changed how we get work done. Now, data security must catch up.

Cybersecurity Extends Far Beyond Security Teams & Everyone Plays a Part

Security isn't about tools or technology; it's about establishing a broad, fundamental awareness and sense of responsibility among all employees.

Google Chrome Redesign Puts Security & Privacy in Users' Hands

The Chrome browser will tell users if their browser is up to date, malicious extensions are installed, and/or a password has been compromised.

EasyJet Sees 9 Million Customer Email Addresses Stolen

More than 2,000 customers also had credit card information taken in the attack.

6 Free Cybersecurity Training and Awareness Courses

Most are designed to help organizations address teleworking risks related to COVID-19 scams.

The 3 Top Cybersecurity Myths & What You Should Know

With millions of employees now attempting to work from home, it's vital to challenge misconceptions about cybersecurity.

Microsoft Patch for Reverse RDP Flaw Leaves Room for Other Attacks

Fix released in February is Microsoft's second pass at fully addressing issue that Check Point first disclosed at Black Hat USA last summer.

EDITORS' CHOICE

7 Security Pros: What My Nontraditional Background Brings to the Job

Job experience and degrees outside of the cybersecurity or IT world can provide invaluable diversity of thinking and problem-solving.

COVID-19: Latest Security News & Commentary

Check out Dark Reading's updated, exclusive news and commentary surrounding the coronavirus pandemic.

How Cybersecurity Incident Response Programs Work (and Why Some Don't)