Dark Reading

DarkSide Ransomware Variant Targets Disk Partitions

05/17/2021
A newly discovered DarkSide ransomware variant can detect and compromise partitioned hard drives, researchers report.

47% of Criminals Buying Exploits Target Microsoft Products

05/17/2021
Researchers examine English- and Russian-language underground exploits to track how exploits are advertised and sold.

DDoS Attacks Up 31% in Q1 2021: Report

05/17/2021
If pace continues, DDoS attack activity could surpass last year's 10-million attack threshold.

Rapid7 Is the Latest Victim of a Software Supply Chain Breach

05/17/2021
Security vendor says attackers accessed some of its source code using a previously compromised Bash Uploader script from Codecov.

RSAC 2021: What Will SolarWinds' CEO Reveal?

05/17/2021
In a keynote conversation with Forrester analyst Laura Koetzle, Sudhakar Ramakrishna will get candid about the historic breach.

Agility Broke AppSec. Now It's Going to Fix It.

05/17/2021
Outnumbered 100 to 1 by developers, AppSec needs a new model of agility to catch up and protect everything that needs to be secured.

Name That Toon: Road Trip

05/17/2021
Feeling creative? Submit your caption in the comments, and our panel of experts will reward the winner with a $25 Amazon gift card.

Rapid7 Source Code Accessed in Supply Chain Attack

05/14/2021
An investigation of the Codecov attack revealed intruders accessed Rapid7 source code repositories containing internal credentials and alert-related data.

How Faster COVID-19 Research Is Being Made Possible by Secure Silicon

05/14/2021
When Intel and Leidos set up a "trusted execution environment" to enable a widespread group of researchers to securely share and confidentially compute real-world data, it was no small achievement.

Cisco Confirms Plans to Acquire Kenna Security

05/14/2021
Cisco plans to integrate Kenna's vulnerability management technology into its SecureX platform.

Chart: Cybersecurity Now a Top Corporate Priority

05/14/2021
Majority of global IT decision makers say cybersecurity is extremely or more important now than it was pre-pandemic, according to Cisco.

SOC Teams Burdened by Alert Fatigue Explore XDR

05/14/2021
ESG research finds a complex attack surface and threat landscape make alerts too overwhelming to monitor accurately

Wi-Fi Design, Implementation Flaws Allow a Range of Frag Attacks

05/14/2021
Every Wi-Fi product is affected by at least one fragmentation and aggregation vulnerability, which could lead to a machine-in-the-middle attack, researcher says.

Security Trends to Follow at RSA Conference 2021

05/14/2021
Here are three key categories of sessions that provide an inside look at some of today's most interesting cybersecurity trends.

Software, Incident Response Among Big Focus Areas in Biden's Cybersecurity Executive Order

05/13/2021
Overall objectives are good, but EO may be too prescriptive in parts, industry experts say.

85% of Data Breaches Involve Human Interaction: Verizon DBIR

05/13/2021
Ransomware, phishing, and Web application attacks all increased during a year in which the majority of attacks involved a human element.

Firms Struggle to Secure Multicloud Misconfigurations

05/13/2021
Half of companies had at least one case of having all ports open to the public, while more than a third had an exposed database.

Dragos & IronNet Partner on Critical Infrastructure Security

05/13/2021
The IT and OT security providers will integrate solutions aimed at improving critical infrastructure security

When AI Becomes the Hacker

05/13/2021
Bruce Schneier explores the potential dangers of artificial intelligence (AI) systems gone rogue in society.

Microsoft Adds GPS Location to Identity & Access Control in Azure AD

05/13/2021
New capabilities let admins restrict access to resources from privileged access workstations or regions based on GPS location.