Dark Reading Daily -- July 19, 2019

BitPaymer Ransomware Operators Wage Custom, Targeted Attacks

A new framework is allowing the threat group to compile variants of the malware for each victim, Morphisec says.

Security Lessons From a New Programming Language

A security professional needed a secure language for IoT development. So he wrote his own, applying learned lessons about memory and resources in the process.

RDP Bug Takes New Approach to Host Compromise

Researchers show how simply connecting to a rogue machine can silently compromise the host.

Open Source Hacking Tool Grows Up

Koadic toolkit gets upgrades - and a little love from nation-state hackers.

Calculating the Value of Security

What will it take to align staff and budget to protect the organization?

79% of US Consumers Fear Webcams Are Watching

Widespread privacy concerns have caused 60% of people to cover their laptop webcams - some in creative ways - survey data shows.

Bulgarian Tax Breach Nets All the Records

An attack by a 'wizard hacker' results in leaked records for virtually every Bulgarian taxpayer.

Software Developers Face Secure Coding Challenges

Seven in ten developers are expected to write secure code, but less than half receive feedback on security, a survey finds.

The 10 Essentials of Infosec Forensics

Whether it's your first investigation or 500th, review the basics of IT forensics to streamline and simplify your discovery.

A Lawyer's Guide to Cyber Insurance: 4 Basic Tips

The time to read the fine print in your cybersecurity insurance policy is before you sign on the dotted line.

EDITORS' CHOICE

8 Legit Tools and Utilities That Cybercriminals Commonly Misuse

Threat actors are increasingly 'living off the land,' using publicly available management and administration tools to conceal malicious activity.

How Capture the Flag Competitions Strengthen the Cybersecurity Workforce

These competitions challenge participants with problems involving digital forensics, cryptography, binary analysis, web security, and many other fields.

NEW FROM THE EDGE

The Truth About Vulnerabilities in Open Source Code

Turns out the problem isn't with the code itself, experts say.

Building and Managing an IT Security Operations Program