Dark Reading Daily -- December 17, 2021

Why Log4j Mitigation Is Fraught With Challenges

The Log4j flaw exists in a component that is not always easy to detect and is widely used beyond an organization's own networks and systems.

Phorpiex Botnet Variant Spread Across 96 Countries

A new variant dubbed "Twizt" has hijacked 969 transactions and stolen the equivalent of nearly $500,000 USD.

Dear Congress: It's Complicated. Please Consider This When Crafting New Cybersecurity Legislation

As mandatory reporting bills work their way through the halls of Congress, what should businesses do to prepare for this pending legislation?

Microsoft Patches Zero-Day Spreading Emotet Malware

The December rollout includes 67 security patches and addresses one zero-day and five more publicly known vulnerabilities.

NIST Cyber-Resiliency Framework Extended to Include Critical Infrastructure Controls

The latest NIST publication outlines how organizations can build systems that can anticipate, withstand, recover from, and adapt to cyberattacks.

The Ransomware Payment Dilemma: Should Victims Pay or Not?

It's time to steer the conversation away from whether payment bans should be implemented to how and when they should take effect.

MORE ON LOG4J

Original Fix for Log4j Flaw Fails to Fully Protect Against DoS Attacks, Data Theft

Organizations should upgrade ASAP to new version of logging framework released Tuesday by the Apache Foundation, security experts say.

Log4Shell: The Big Picture

A look at why this is such a tricky vulnerability and why the industry response has been good, but not great.

Analysis: Log4j Vulnerability Highlights the Value of Defense-in-Depth, Accurate Inventory

The early lessons from Log4j indicate that key security principles can help better handle these high-risk software supply chain security incidents if teams have proper support.

How Do I Find My Servers With the Log4j Vulnerability?

This Tech Tip outlines how enterprises can use Canarytokens to find servers in their organization vulnerable to CVE-2021-44228.

LATEST FROM THE EDGE

5 Ways to Keep Fraudsters at Bay Over the Holidays

Organizations want to focus on customer satisfaction and increased revenues during the holiday shopping season. Here are some smart security and fraud protections to keep in mind.

LATEST FROM DR TECHNOLOGY

Mobile App Developers Keep Fraudulent Traffic at Bay with Anti-Fraud API

The new API and SDK from Pixalate helps mobile developers avoid getting their apps delisted from app stores by detecting and blocking fraudulent traffic.

How Data Breaches Affect the Enterprise