Dark Reading Daily -- August 05, 2021

Why Supply Chain Attacks Are Destined to Escalate

In his keynote address at Black Hat USA on Wednesday, Matt Tait, chief operating officer at Corellium, called for software platform vendors and security researchers to do their part to thwart the fallout of software supply chain compromises.

As Attackers Circle, Federal Agencies Fail to Improve Cybersecurity

Despite being the frequent target of nation-state and criminal actors, nearly every US government agency gets a "C" or "D" for data security, according to a new Senate report.

A New Approach to Securing Authentication Systems' Core Secrets

Researchers at Black Hat USA explain issues around defending "Golden Secrets" and present an approach to solving the problem.

Dark Reading Virtual News Desk Returns to Black Hat

Coming to you prerecorded from home offices around the world!

5 Key Lessons From ICS Attacks Through the Ages

Industrial control systems attacks are happening with more frequency, but they are hardly new.

An increase in global cyberattacks was driven by Web shell activity, targeted ransomware and extortion operations, and supply chain intrusions.

NSA & CISA Publish Kubernetes Security Guidance

Kubernetes is frequently targeted for data theft, computational power theft, or denial of service, the agencies say in a joint advisory.

New Normal Demands New Security Leadership Structure

At the inaugural Omdia Analyst Summit, experts discuss where the past year has created gaps in traditional security strategy and how organizations can fill them.

8 Security Tools to be Unveiled at Black Hat USA

Security researchers and practitioners share a host of new cyber tools for penetration testing, reverse engineering, malware defense, and more.

Get Ahead of the Hack: Why Cyber Insurance Is Not Enough

Cybersecurity insurance is a smart investment to protect against the effects of ransomware and other attacks, but it shouldn't be your primary defense.

EDITORS' CHOICE

Average Cost to Buy Access to a Compromised Company: $1,000

The flourishing market for initial access to companies' networks highlights how cybercriminal groups continue to specialize in particular stages of the attack-chain pipeline.

Think Having Avoided Kaseya Means You're Safe? Guess Again

The lesson: Don't assume that everything coming from an apparently benign source is safe.

LATEST FROM THE EDGE

Let the Security Facts Speak for Themselves

Five ways sticking to the facts is good for an organization’s security posture.

The State of Cybersecurity Incident Response