Dark Reading

Citrix Urges Firms to Harden Configurations After Flaw Report

12/23/2019
A vulnerability in two of the company's appliances opens 80,000 networks up for exploitation.

F5 Pays $1 Billion for Shape

12/20/2019
The acquisition adds fraud detection and prevention to the application delivery company's tool collection.

Real-Time Payment Platforms Offer Fast Cash & Fast Fraud

12/19/2019
Real-time payment services like The Clearing House and Zelle will completely clear transactions in an instant...but account takeover attackers love that speed as much as you do.

China-Based Cyber Espionage Group Targeting Orgs in 10 Countries

12/19/2019
Dozens of organizations across multiple sectors have become victims of APT20 in the past two years.

Patch Management: How to Prioritize an Underserved Vulnerability

12/19/2019
Why is one of the biggest problems in cybersecurity also one that CISOs largely ignore? Here are three reasons and a road map to a modern approach.

5 Security Resolutions to Prevent a Ransomware Attack in 2020

12/18/2019
Proactively consider tools to detect anomalous behavior, automatically remediate, and segment threats from moving across the network.

Microsoft Issues Out-of-Cycle SharePoint Update

12/18/2019
The update repairs vulnerabilities that could lead to very effective phishing messages.

5 Pieces of GDPR Advice for Teams Without Privacy Compliance Staff

12/18/2019
Are you an army of one tasked with compliance and data privacy? Try these tips to get you and your organization in alignment with regulators.

15 Million Patient Records Exposed Attack on Canadian Lab

12/17/2019
A cyberattack against LifeLabs exposed personal information on patients in Ontario and British Columbia.

Facebook Fixes WhatsApp Group Chat Security Issue

12/17/2019
Flaw allowed attackers to repeatedly crash group chat and force users to uninstall and reinstall app, Check Point says.

Higher Degree, Higher Salary? Not for Some Security Pros

12/17/2019
Turns out, skill beats experience and an academic degree doesn't guarantee higher compensation for five security positions.

Talking to the Board about Cybersecurity

12/17/2019
A chief financial officer shares five winning strategies for an effective board-level conversation about right-sizing risk.

Financial Services Breaches Less Common, More Damaging, Than Those in Other Sectors

12/16/2019
While far less common than breaches in other industry sectors, financial services breaches were more than twice as expensive, per record exposed, than the average for tech businesses.

Weak Crypto Practice Undermining IoT Device Security

12/16/2019
Keyfactor says it was able to break nearly 250,000 distinct RSA keys - many associated with routers, wireless access points, and other Internet-connected devices.

Mobile Devices Account for 41% of DDoS Attack Traffic

12/16/2019
DNS amplification attacks continue to dominate distributed denial-of-service (DDoS) attacks, while mobile devices make up a larger share of traffic.

Ransomware 'Crisis' in US Schools: More Than 1,000 Hit So Far in 2019

12/16/2019
Meanwhile, the mayor of the city of New Orleans says no ransom money demands were made as her city struggles to recover from a major ransomware attack launched last week.

SQL Server 2019 Tool Tells Attackers Which Data Is Sensitive

12/16/2019
The design of SQL Data Discovery & Classification could let attackers pinpoint sensitive information while flying under organizations' radars.

What Should I Look for in a Data Protection Officer?

12/16/2019
The right candidate will possess the following skills.

Rooster Teeth Alerts Customers to Magecart Attack

12/16/2019
The entertainment company discovered malicious content on the Shopify platform for its online store and removed it the same day.

Disarming Disinformation

12/16/2019
Disinformation attacks are just as detrimental to businesses as they are to national elections. Here's what's at stake in 2020 and what infosec teams can do about them.