Equifax's Lessons Are Still Relevant, 5 Years Later

Cybersecurity pros discuss a trio of lessons from the Equifax hack and how to prevent similar attacks in the enterprise.

source https://www.darkreading.com/edge-articles/5-years-after-the-equifax-breach-industry-experts-share-new-insights

IoT Fingerprinting Helps Authenticate and Secure All Those Devices

For organizations struggling to protect a rapidly expanding volume of IoT devices, IoT fingerprinting could help with security and management.

source https://www.darkreading.com/dr-tech/iot-fingerprinting-helps-authenticate-and-secure-all-those-devices

Embracing the Next Generation of Business Developers

Security teams that embrace low-code/no-code can change the security mindset of business users.

source https://www.darkreading.com/edge-articles/embracing-the-next-generation-of-business-developers

Microsoft Data-Exposure Incident Highlights Risk of Cloud Storage Misconfiguration

Many enterprises continue to leave cloud storage buckets exposed despite widely available documentation on how to properly secure them.

source https://www.darkreading.com/cloud/microsoft-data-exposure-incident-highlights-risk-of-cloud-storage-misconfigurations

Patching-as-a-Service Offers Benefits, Challenges

Organizations without the time or talent to patch may find patching-as-a-service to be a way to improve security.

source https://www.darkreading.com/dr-tech/patching-as-a-service-offers-benefits-challenges

Cybersecurity's Hiring Spree Requires a Recruiting Rethink

Just 65 cybersecurity professionals are in the workforce for every 100 available jobs, new study shows.

source https://www.darkreading.com/cloud/cybersecurity-s-hiring-spree-is-going-to-require-recruitment-rethink

Comprehensive Network Visibility Is Imperative for Zero-Trust Maturity

Distrust and verify, because you can't protect what you can't see.

source https://www.darkreading.com/edge-articles/distrust-and-verify-why-comprehensive-network-visibility-is-required-for-mature-zero-trust-architectures

Microsoft Addresses Zero-Days, but Exchange Server Exploit Chain Remains Unpatched

The computing giant didn't fix ProxyNotLogon in October's Patch Tuesday, but it disclosed a rare 10-out-of-10 bug and patched two other zero-days, including one being exploited.

source https://www.darkreading.com/vulnerabilities-threats/microsoft-zero-days-exchange-server-exploit-chain-remains-unpatched

Emotet Rises Again With More Sophistication, Evasion

An analysis of the malware and its infection strategies finds nearly 21,000 minor and 139 major variations on the malware — complexity that helps it dodge analysis.

source https://www.darkreading.com/threat-intelligence/emotet-rises-again-with-more-sophistication-evasion

macOS Archive Utility Bug Lets Malicious Apps Bypass Security Checks

Exploit allows unsigned and unnotarized macOS applications to bypass Gatekeeper and other security, without notifying the user.

source https://www.darkreading.com/application-security/macos-archive-utility-bug-malicious-apps-bypass-security-checks

Relentless Russian Cyberattacks on Ukraine Raise Important Policy Questions

Microsoft cybersecurity executive John Hewie explained cyberwar developments and what they mean for Western democratic policy going forward.

source https://www.darkreading.com/threat-intelligence/russian-cyberattacks-ukraine-raise-important-policy-questions

KnowBe4 Simplifies Compliance Requirements for Healthcare Privacy

KnowBe4's Compliance Audit Readiness Assessment (CARA) now addresses select requirements from HIPAA Security Rule.

source https://www.darkreading.com/risk/knowbe4-simplifies-compliance-requirements-for-healthcare-privacy

Pathlock Expands SAP Capabilities with Acquisition of Grey Monarch

Combination of two companies to help SAP customers streamline audit, compliance and control processes.

source https://www.darkreading.com/application-security/pathlock-expands-sap-capabilities-with-acquisition-of-grey-monarch

Ransomware Attacks Continue Increasing: 20% of All Reported Attacks Occurred in the Last 12 Months - New Survey

Survey of over 2,000 IT pros revealed that a quarter either don't know or don't think Microsoft 365 data can be affected by ransomware.

source https://www.darkreading.com/attacks-breaches/ransomware-attacks-continue-increasing-20-of-all-reported-attacks-occurred-in-the-last-12-months---new-survey

Plug Your Data Leaks: Integrating Data Loss Prevention into Your Security Stack

The average cost of a data-exposing cybersecurity incident is $4.35 million. If your business can’t avoid to pay, make sure you’ve got a strong data loss prevention practice in place.

source https://www.darkreading.com/cloud/plug-your-data-leaks-integrating-data-loss-prevention-into-your-security-stack

Google Quashes 5 High-Severity Bugs With Chrome 106 Update

External researchers contributed 16 of the 20 security updates included in the new Chrome 106 Stable Channel rollout, including five high-severity bugs.

source https://www.darkreading.com/application-security/google-5-high-severity-bugs-chrome-106-update

Sophisticated Covert Cyberattack Campaign Targets Military Contractors

Malware used in the STEEP#MAVERICK campaign features rarely seen obfuscation, anti-analysis, and evasion capabilities.

source https://www.darkreading.com/attacks-breaches/sophisticated-cyberattack-campaign-targets-defense-contractors

FBI Helping Australian Authorities Investigate Massive Optus Data Breach: Reports

Initial reports suggest a basic security error allowed the attacker to access the company's live customer database via an unauthenticated API.

source https://www.darkreading.com/attacks-breaches/fbi-helping-australian-authorities-investigate-massive-optus-data-breach-reports

Despite Recession Jitters, M&A Dominates a Robust Cybersecurity Market

Funding has been somewhat lower than last year, but investment remains healthy, analysts say, amid thirst for cloud security in particular.

source https://www.darkreading.com/application-security/recession-jitters-ma-dominates-robust-cybersecurity-market

Researchers Uncover Mysterious 'Metador' Cyber-Espionage Group

Researchers from SentinelLabs laid out what they know about the attackers and implored the researcher community for help in learning more about the shadowy group.

source https://www.darkreading.com/attacks-breaches/researchers-uncover-mysterious-metador-cyber-espionage-group