Dark Reading Daily -- November 23, 2021

Follow Dark Reading:

November 23, 2021

LATEST SECURITY NEWS & COMMENTARY

10 Stocking Stuffers for Security Geeks

Check out our list of gifts with a big impact for hackers and other techie security professionals.

GoDaddy Breach Exposes SSL Keys of Managed WordPress Hosting Customers

The incident, which affected 1.2 million users, raises concerns about domain impersonation attacks and other malicious activities.

Bug Bounties Surge as Firms Compete for Talent

Companies such as GItLab, which today increased its payment for critical bugs by 75%, are raising bounties and bonuses to attract top-notch researchers.

Why the 'Basement Hacker' Stereotype Is Wrong — and Dangerous

It engenders a false sense of superiority that spurs complacency among risk managers and executives, who in turn may underinvest in security teams, rely too much on automation, or both.

CISA Urges Critical Infrastructure to Be Alert for Holiday Threats

CISA and the FBI share steps organizations should take to better protect against security threats during holidays and weekends.

MORE NEWS / MORE COMMENTARY


HOT TOPICS
Addressing the Low-Code Security Elephant in the Room The danger of anyone being able to spin up new applications is that few are thinking about security. Here's why everyone is responsible for the security of low-code/no-code applications. Zero Trust: An Answer to the Ransomware Menace? Zero trust isn't a silver bullet, but if implemented well it can help create a much more robust security defense. North Korean Hacking Group Targets Diplomats, Forgoes Malware The TA406 group uses credential harvesting to target diplomats and policy experts in the United States, Russia, China, and South Korea, rarely resorting to malware. MORE

EDITORS' CHOICE

US Indicts Iranian Nationals for Cyber-Enabled Election Interference

Among other things, the pair pretended to be Proud Boys volunteers and sent in a fake video and emails to Republican lawmakers purporting to show Democratic Party attempts to subvert the 2020 presidential elections.

LATEST FROM THE EDGE

10 Ways to Avoid Zero-Trust Failure

Here are the prerequisites to have in order before getting past the zero-trust gate.

LATEST FROM DR TECHNOLOGY

Pentagon Partners With GreyNoise to Investigate Internet Scans

With a new 5-year $30 million contract, GreyNoise Intelligence will assist multiple teams across the Department of Defense plans in a defensive capacity.

Tech Resources

ACCESS TECH LIBRARY NOW

Preventing Attackers from Navigating Your Enterprise Systems
Over the past few years, cyber attackers have favored exploits in which they steal a legitimate user's credentials and then navigate enterprise defenses as a trusted end user. This "lateral movement" enables the attacker to quickly gain access to a ...
Beyond Patch Management: Next-Generation Approaches to Finding and Fixing Vulnerable Code
A good patch management process can help make your enterprise data more secure. But what does it do for vulnerabilities that haven't been patched? Attackers are increasingly manipulating open-source, third-party components in software -- do you have a process to ...

FEATURED REPORTS

CURRENT ISSUE

How Data Breaches Affect the Enterprise
DOWNLOAD THIS ISSUE	SUBSCRIBE NOW
BACK ISSUES \| MUST READS \| TECH DIGEST

PRODUCTS & RELEASES

Two Iranian Nationals Charged for Cyber-Enabled Disinformation and Threat Campaign Designed to Influence the 2020 US Presidential Election

Artificial Intelligence and Machine Learning, Cloud Computing, and 5G Will Be the Most Important Technologies in 2022, Says New IEEE Study

GBG Announces It Has Agreed to Acquire Acuant

MORE PRODUCTS & RELEASES

Dark Reading Daily
-- Published By Dark Reading
Informa Tech
303 Second St., Suite 900 South Tower, San Francisco, CA 94107

To update your profile, change your e-mail address, or unsubscribe, click here.

To opt-out of any future Dark Reading Daily Newsletter emails, please respond here.

Thoughts about this newsletter? Give us feedback.

Keep This Newsletter Out Of Your SPAM Folder
Don't let future editions go missing. Take a moment to add the newsletter's address to your anti-spam white list:

If you're not sure how to do that, ask your administrator or ISP. Or check your anti-spam utility's documentation.

We take your privacy very seriously. Please review our Privacy Statement.