Dark Reading Daily -- December 11, 2019

Data Leak Week: Billions of Sensitive Files Exposed Online

A total of 2.7 billion email addresses, 1 billion email account passwords, and nearly 800,000 applications for copies of birth certificate were found on unsecured cloud buckets.

Microsoft Fixes Windows Zero-Day on Lightest Patch Tuesday of 2019

This month's batch of security updates addresses 36 CVEs, seven of which are rated Critical and one of which has been exploited in the wild.

Intel's CPU Flaws Continue to Create Problems for the Tech Community

We can't wait out this problem and hope that it goes away. We must be proactive.

Deliver a Deadly Counterpunch to Ransomware Attacks: 4 Steps

You can't prevent all ransomware attacks. However, it's possible to ensure that if a breach happens, it doesn't spread, affect business, and become a newsworthy event.

Only 53% of Security Pros Have Ownership of Workforce IAM

Most practitioners report an increase in identities, but many don't have control over how those identities are protected from a range of attacks.

Blink Cameras Found with Multiple Vulnerabilities

Researchers found three broad types of vulnerabilities, one of which should be particularly concerning to consumers.

How Attackers Used Look-Alike Domains to Steal $1 Million From a Chinese VC

Money meant to fund an Israeli startup wound up directly deposited to the scammers.

Microsoft 'Campaign Views' Offers Full Look at Office 365 Attacks

Campaign views, arriving in public preview, aims to share more context around how attackers targeted an organization and whether its defenses worked.

Mega Breaches Are Forcing Us to a Passwordless World. Are We Finally Ready?

Passwordless authentication advocates see 2020 as a potential turning point year for the technology. But can the industry get off the dime?

EDITORS' CHOICE

10 Notable Cybersecurity Acquisitions of 2019, Part 2

As mergers and acquisitions continued to shape the security industry throughout 2019, these deals were most significant.

Maersk CISO Says NotPeyta Devastated Several Unnamed US firms

At least two companies may have been dealt even more damage than the shipping giant, which lost nearly its entire global IT infrastructure.

NEW FROM THE EDGE

Security 101: What Is a Man-in-the-Middle Attack?

A breakdown of the common ways criminals employ MitM techniques to snare victims, and tips for protecting users from these dirty tricks.

Navigating the Deluge of Security Data