Dark Reading Daily -- February 26, 2019

Your Employees Want to Learn. How Should You Teach Them?

Security practitioners are most likely to stay at organizations that offer career development. Here are eight tips to consider as you plan your course of action.

New Arm Certification Aims to Secure IoT Devices

A three-tier certification regimen shows adherence to the Platform Security Architecture.

TurboTax Hit with Cyberattack, Tax Returns Compromised

Officials report an unauthorized party obtained tax return data by using credentials obtained from an outside source.

Secure the System, Help the User

The enterprise must do its part in deploying and maintaining secure systems so that end users stand a chance against attackers.

Russian Hacker Pleads Guilty to Bank Fraud

The hacker ran a botnet that spread 'NeverQuest' malware for three years and collected millions of banking credentials.

Lessons From the War on Malicious Mobile Apps

Despite the openness of the Android platform, Google has managed to keep its Play store mainly free of malware and malicious apps. Outside of the marketplace is a different matter.

6 Tips for Getting the Most from Your VPN

VPNs are critical for information security. But simply having these cozy security tunnels in the toolkit isn't enough to keep an organization's data safe.

The Anatomy of a Lazy Phish

A security engineer breaks down how easy it is for unskilled attackers to trick an unsuspecting user to submit credentials to a phishing site.

'Formjacking' Compromises 4,800 Sites Per Month. Could Yours Be One?

Cybercriminals see formjacking as a simple opportunity to take advantage of online retailers - and all they need is a small piece of JavaScript.

Why Cybersecurity Burnout Is Real (and What to Do About It)

The constant stresses from advanced malware to zero-day vulnerabilities can easily turn into employee overload with potentially dangerous consequences. Here's how to turn down the pressure.

EDITORS' CHOICE

6 Tax Season Tips for Security Pros

Here are some practical ways to ensure your company's safety as Uncle Sam comes calling.

Privacy Ops: The New Nexus for CISOs & DPOs

No longer can privacy be an isolated function managed by legal or compliance departments with little or no connection to the organization's underlying security technology.

5 Emerging Cyber Threats to Watch for in 2019