Dark Reading

'Clumsy' BlackByte Malware Reuses Crypto Keys, Worms Into Networks

10/15/2021
Discovered during a recent incident response engagement, the malware avoids Russian computers and uses a single symmetric key for encrypting every compromised system.

Evolution Equity Partners Close $400M for Cybersecurity Investments

10/15/2021
The firm expands capital base, team, and platform addressing a rapidly growing cybersecurity investment opportunity.

6 Lessons From the Expiration of the Let's Encrypt Root Certificate

10/14/2021
Fallout from the transition highlights the need for organizations to monitor and have processes for updating CA roots, experts say.

Fugue Adds Kubernetes Security Checks to Secure Infrastructure-as-Code

10/13/2021
Developers can apply proper security controls as they programmatically deploy Kubernetes clusters.

SonicWall Secures Mix of Cloud, Hybrid and Traditional Networks

10/13/2021
Company’s virtual offerings, cloud services match with on-premises deployments to solve real-world security challenges for SMBs, enterprises, governments, and MSSPs.

What Does a Chief Product Security Officer Do?

10/13/2021
A CPSO bridges the gap between developers and security to ensure products are built securely and safely.

VirusTotal Shares Data on Ransomware Activity

10/13/2021
Google's online malware scanning service analyzed 80 million ransomware samples that were uploaded in the past year-and-a-half.

Are You Ready for the Privacy Laws Tsunami?

10/13/2021
Think PCI, HIPAA, and GDPR compliance is tough? There's a tsunami of similar laws on the way. Prepare your business for success with privacy by design.

Corelight Unveils Corelight Labs, a Hub for Research and Innovation

10/13/2021
Company expands its research expertise with addition of AI and security operations experts from its PatternEx acquisition to the Labs team.

Worried Over Antitrust Debate, Apple Talks Sideloading Dangers

10/13/2021
Apple argues in a position paper that sideloading apps poses a major security threat to its users, as many lawmakers and technologists criticize its App Store as a monopoly.

A Close Look at Russia's Ghostwriter Campaign

10/13/2021
The group, which conducts espionage and sows disinformation, is larger than previously thought and has shifted tactics.

Microsoft Fixes Zero-Day Flaw in Win32 Driver

10/12/2021
A previously known threat actor is using the flaw in a broad cyber-espionage campaign, security vendor warns.

New Vaultree Encryption-as-a-Service Keeps Cloud Data Fully Encrypted

10/12/2021
Encryption startup Vaultree aims to give companies the ability to work with fully encrypted data in the cloud.

Former Director of IT and Cybersecurity for Warren Presidential Campaign Launches Personified

10/12/2021
Founder and CEO Mike Marotti will lead experts in campaign security to help progressive politicians and organizations with cybersecurity and IT needs.

High-Profile Breaches Are Shifting Enterprise Security Strategy

10/12/2021
Increased media attention is driving changes in enterprise security strategy -- some positive, some negative.

New CrowdXDR Alliance Defines Data Exchange Standard for XDR

10/12/2021
Google Cloud, Okta, ServiceNow, Zscaler, Netskope, Proofpoint, Extrahop, Mimecast, Claroty, and Corelight have joined the coalition.

Smaller 'Bit and Piece' DDoS Attacks Slam Servers to Evade Mitigation Systems

10/12/2021
Nearly all DDoS attacks in the first half of 2021 were less than 1 Gbps, Nexusguard found.

Why Choke-Point Analysis Is Essential in Active Directory Security

10/12/2021
Defense should focus on high-value choke points first to ensure that their most critical assets are protected, before moving on to deal with other attack paths.

Google Launches Security Advisory Service, Security to Workspaces

10/12/2021
Internet giant aims to help companies use the cloud securely and adds more security features to its productivity workspaces to better compete with Microsoft.

Palo Alto Networks to Transfer Stock Exchange Listing to Nasdaq

10/12/2021
Palo Alto Networks anticipates meeting the requirements for inclusion in the NASDAQ-100 index when it rebalances in December.