Dark Reading Daily -- November 12, 2021

Follow Dark Reading:

November 12, 2021

LATEST SECURITY NEWS & COMMENTARY

What Happens If Time Gets Hacked

Renowned hardware security expert raises alarm on the risk and dangers of cyberattackers targeting the current time-synchronization infrastructure.

In Appreciation: Alan Paller

Alan Paller, founder of the famed SANS Institute, passed away on Nov. 9.

Cloud Attack Analysis Unearths Lessons for Security Pros

Researchers detail their investigation of a cryptomining campaign stealing AWS credentials and how attackers have evolved their techniques.

'Lyceum' Threat Group Broadens Focus to ISPs

New report suggests attacker is targeting trusted supply chain companies in order to compromise large numbers of downstream customers.

Third-Party Software Risks Grow, but So Do Solutions

Enterprises are more dependent than ever on open source software and need to manage the risk posed by vulnerabilities in components and third-party vendors.

Should Our Security Controls Be More Like North Korea or Norway?

When the drive for additional visibility and awareness is led by the business rather than just a SOC team, both the business and security can benefit.

MORE NEWS / MORE COMMENTARY


HOT TOPICS
Hacker-for-Hire Group Spied on More Than 3,500 Targets in 18 Months Russian-speaking "Void Balaur" group's victims include politicians, dissidents, human rights activists, doctors, and journalists, security vendor discloses at Black Hat Europe 2021. Phishing Attack Blends Spoofed Amazon Order and Fraudulent Customer Service Agents It's the latest in a series of clever brand impersonation scams that use multiple vectors to lure victims. 4 Tips to Secure the OT Cybersecurity Budget You Require OT security engineers and personnel should approach senior management with an emphasis on risk reduction benefits and with a concrete plan to secure budget and funding before it's too late. MORE

EDITORS' CHOICE

ChaosDB: Researchers Share Technical Details of Azure Flaw

Wiz researchers who discovered a severe flaw in the Azure Cosmos DB database discussed the full extent of the vulnerability at Black Hat Europe.

LATEST FROM THE EDGE

How Do I Know It's Time to Consider a SASE Migration?

The rapid shift to a hybrid workplace and accelerated adoption of new technologies means it's time to rethink networking security approaches.

LATEST FROM DR TECHNOLOGY

Google Open Sources ClusterFuzzLite

ClusterFuzzLite is a stripped-down version of continuous fuzzing tool ClusterFuzz that integrates CI tools.

Tech Resources

ACCESS TECH LIBRARY NOW

Beyond Patch Management: Next-Generation Approaches to Finding and Fixing Vulnerable Code
A good patch management process can help make your enterprise data more secure. But what does it do for vulnerabilities that haven't been patched? Attackers are increasingly manipulating open-source, third-party components in software -- do you have a process to ...
Creating an Encryption Strategy for Your Enterprise
Maybe it's not time yet to start "quantum-proofing" (and maybe it is), but that doesn't mean your encryption strategy doesn't need a refresh. If your organization is like most enterprises, you've likely purchased or adopted a wide variety of encryption ...

FEATURED REPORTS

Enterprise Cybersecurity Plans in a Post-Pandemic World
As the COVID-19 pandemic eases, IT security threats and the challenges involved in responding to them are trending upward. Security leaders expect that cyberattacks like ransomware, phishing, and malware will increase even as the pandemic eventually recedes. Download the Dark ...
The State of Malware Threats

CURRENT ISSUE

How Data Breaches Affect the Enterprise
DOWNLOAD THIS ISSUE	SUBSCRIBE NOW
BACK ISSUES \| MUST READS \| TECH DIGEST

PRODUCTS & RELEASES

CISA and State and Local Partners Test Emergency Response Plans at Chevron Salt Lake Refinery

83% of Critical Infrastructure Organizations Suffered Breaches, 2021 Cybersecurity Research Reveals

Kaspersky Finds DDoS Attacks in Q3 Grow by 24%, Become More Sophisticated

MORE PRODUCTS & RELEASES

Dark Reading Daily
-- Published By Dark Reading
Informa Tech
303 Second St., Suite 900 South Tower, San Francisco, CA 94107

To update your profile, change your e-mail address, or unsubscribe, click here.

To opt-out of any future Dark Reading Daily Newsletter emails, please respond here.

Thoughts about this newsletter? Give us feedback.

Keep This Newsletter Out Of Your SPAM Folder
Don't let future editions go missing. Take a moment to add the newsletter's address to your anti-spam white list:

If you're not sure how to do that, ask your administrator or ISP. Or check your anti-spam utility's documentation.

We take your privacy very seriously. Please review our Privacy Statement.