Dark Reading Daily -- January 15, 2021

Businesses Struggle with Cloud Availability as Attackers Take Aim

Researchers find organizations struggle with availability for cloud applications as government officials warn of cloud-focused cyberattacks.

Shifting Privacy Landscape, Disruptive Technologies Will Test Businesses

A new machine learning tool aims to mine privacy policies on behalf of users.

Who Is Responsible for Protecting Physical Security Systems From Cyberattacks?

It's a question that continues to engage debate, as the majority of new physical security devices being installed are now connected to a network. While this offers myriad benefits, it also raises the question: Who is responsible for their cybersecurity?

Vulnerability Management Has a Data Problem

Security teams have an abundance of data, but most of it lacks the context necessary to improve remediation outcomes.

NSA Recommends Using Only 'Designated' DNS Resolvers

Agency provides guidelines on securely deploying DNS over HTTPS, aka DoH.

'Chimera' Threat Group Abuses Microsoft & Google Cloud Services

Researchers detail a new threat group targeting cloud services to achieve goals aligning with Chinese interests.

More SolarWinds Attack Details Emerge

A third piece of malware is uncovered, but there are still plenty of unknowns about the epic attacks purportedly out of Russia.

Bringing Zero Trust to Secure Remote Access

Demand for secure remote access has skyrocketed during the pandemic. Here Omdia profiles more secure alternatives to virtual private network (VPN) technology.

US Capitol Attack a Wake-up Call for the Integration of Physical & IT Security

How two traditionally disparate security disciplines can be united.

EDITORS' CHOICE

Virtual Pen-Testing Competition Tasks College Students With Running a Red Team Operation

Aimed at developing offensive cyber talent, last weekend's sixth annual Collegiate Penetration Testing Competition brought out some of the brightest from RIT and Stanford, among other universities.

How to Boost Executive Buy-In for Security Investments

Linking security budgets to breach-protection outcomes helps executives balance spending against risk and earns CISOs greater respect in the C-suite.

LATEST FROM THE EDGE

Understanding TCP/IP Stack Vulnerabilities in the IoT

Internet of Things devices are highly susceptible to attacks, breaches, and flaws emanating from issues within the TCP/IP network communications architecture. Here's an overview of what you need to know to mitigate risks.

2020: The Year in Security