Dark Reading Daily -- March 22, 2022

Will the Biggest Clouds Win? Lessons From Google's Mandiant Buy

Google eventually won out in the competition for Mandiant, but Microsoft's interest underscores the trend in consolidation of security services into large cloud providers, experts say.

'Unique Attack Chain' Drops Backdoor in New Phishing Campaign

A threat group combines the use of steganography, open source tools, and Python scripts to target organizations in France.

Crowdsourced Efforts Get Leveraged in Ukraine Conflict

The battle is not just being waged in the physical world — it's also happening online. And average people are taking part, not just governments.

Name That Toon: Sleep Like a Baby

Feeling creative? Submit your caption and our panel of experts will reward the winner with a $25 Amazon gift card.

White House Warns of New Intel on Russia Mulling Cyberattack 'Options' Against US

Biden administration doubles down on its previous warnings of possible Russian cyberattacks in the wake of hefty economic sanctions imposed on Russia by the US.

(Sponsored Article) 4 Critical Capabilities for a SaaS Security Posture Management (SSPM) Solution

The need for deep visibility and remediation for SaaS security settings is critical. If you're considering a SaaS Security Posture Management solution, here’s a checklist of what to look for.

Ransomware Attack Led Bridgestone to Halt US Tire Production for a Week

Japanese manufacturer confirmed a Feb. 27 attack on its US subsidiary that led to a temporary production shutdown.

What the Newly Signed US Cyber-Incident Law Means for Security

Bipartisan cybersecurity legislation comes amid increased worries over ransomware, and fears of cyberattacks from Russia in the wake of its invasion of Ukraine.

NAS Vendor Says Several of Its Products Likely Contain Linux 'Dirty Pipe' Flaw

QNAP's disclosure this week is the latest reminder of the potentially wide impact of privilege escalation flaw in the Linux kernel.

Stopping Russian Cyberattacks at Their Source

Step up training with cybersecurity drills, teach how to avoid social engineering traps, share open source monitoring tools, and make multifactor authentication the default.

EDITORS' CHOICE

Code-Sabotage Incident in Protest of Ukraine War Exposed Open Source Risks

The maintainer of a widely used npm module served up an unwelcome surprise for developers.

LATEST FROM THE EDGE

Embracing Security by Design: Constructing a More Secure Framework

Designing a solid security interface, like most things, is more of a human problem than a technical one.

LATEST FROM DR TECHNOLOGY

Binarly Coordinates Patches for 3 Firmware Flaws With Dell

The latest three memory corruption flaws in Dell BIOS highlights the challenges of fixing firmware vulnerabilities.

Rethinking Endpoint Security in a Pandemic and Beyond