Dark Reading

CISA Issues New Directive for Patching Known Exploited Vulnerabilities

11/03/2021
The goal is to reduce civilian federal agency exposure to attacks that threat actors are actively using in campaigns, agency says.

5 MITRE ATT&CK Tactics Most Frequently Detected by Cisco Secure Firewalls

11/03/2021
Cisco Security examines the most frequently encountered MITRE ATT&CK tactics and techniques.

Cloud Data Security Startup Launches

11/03/2021
TrustLogix aims to streamline and simplify data governance in the cloud.

Where Is Cloud Permissions Management Headed?

11/03/2021
Cloud permissions management emerged as a standalone cloud security technology but is quickly becoming part of a broader set of capabilities

US Blacklists Israeli Firms NSO Group and Candiru

11/03/2021
The US Commerce Department has also added Russia's Positive Technologies and Singapore's Computer Security Initiative Consultancy.

Infosec and Business Alignment Lowers Breach Cost, Boosts Security

11/03/2021
As attacks and security budgets continue to rise, data shows the most secure organizations are the ones that strike a security-business balance.

Is Sandboxing Dead?

11/03/2021
Organizations should start to evaluate other security measures to replace or complement the once-venerable security sandbox.

Valtix Delivers Free Cloud Security for Departmental, Development, and Test Applications

11/03/2021
Company aims to make cloud network security more accessible to all organizations.

Risk Quantification: A Powerful Tool in Your Cyberthreat Defense Arsenal

11/03/2021
Three ways that understanding your cyber-risk in real dollars can help your organization survive the threat of ransomware and other attacks.

Simulation Game Teaches Non-Security Staff How to Handle a Cyber Crisis

11/02/2021
In this card-based game from Kaspersky, players work through a cyberattack scenario and learn how each decision they make has consequences.

Cloud, Remote Work Will Change How IT Uses Vulnerability Scanners

11/02/2021
Tenable added Raspberry Pi support to Nessus v10.0 to help security professionals conduct audits and assessments remotely.

Attackers Flaunt Remote Access Credentials, Threaten Supply Chain

11/02/2021
Attackers advertise access to computers within shipping and logistics companies as the global supply chain struggles to meet post-COVID demands.

The Executive Women's Forum on Information Security, Risk Management & Privacy Elects Three Board Advisers

11/02/2021
Security executives hail from Target, Eli Lilley, and SecurityCurve/SaltCybersecurity.

Dragos Launches ServiceNow’s OT Asset Discovery App

11/02/2021
Integration with Dragos Platform will help joint customers to expand the visibility of ICS/OT assets.

Vaultree Raises $3.3M for Encryption Solution

11/02/2021
The company's platform uses Enhanced Searchable Symmetric Encryption (ESSE) and Fully Homomorphic Encryption (FHE) technologies.

44% of Parents Struggle to Follow Tech Rules They Set for Their Kids

11/02/2021
Parents perceive norms of behavior to be different for themselves and their children, according to Kaspersky..

Microsoft Expands Security to AWS in Multicloud Push

11/02/2021
Microsoft will expand its cloud security tools to AWS within a suite called Defender for Cloud and launch a new Defender for Business in preview later this month.

FBI: Ransomware Actors Use Financial Events to Extort Victims

11/02/2021
Attackers research financial information about an organization and threaten to disclose it if they don't receive ransom quickly.

Laika Raises $35M Series B to Help Companies Prepare for Security Audits

11/02/2021
Laika helps companies establish robust compliance practices to meet the strict requirements from regulators and enterprise customers.

China Hosts More Malware Than Russia: Findings from DNSFilter's 2021 Domain Threat Report

11/02/2021
Cryptomining has also had a resurgence over the last year as blockchain technology and NFTs rise in popularity.