Dark Reading Daily -- September 25, 2019

Iranian Government Hackers Target US Veterans

'Tortoiseshell' discovered hosting a phony military-hiring website that drops a Trojan backdoor on visitors.

Russia Chooses Resiliency Over Efficiency in Cyber Ops

New analysis of the software used by espionage groups linked to Russia finds little overlap in their development, suggesting that the groups are siloed.

How to Define & Prioritize Risk Management Goals

As risk management programs differ from business to business, these factors remain constant.

Startup Cowbell Cyber Launches 'Continuous Underwriting' Platform

New inside-out approach will give SMBs a way to buy insurance coverage based on a realistic and ongoing assessment of their risk, company says.

Cloudflare Introduces 'Bot Fight Mode' Option for Site Operators

Goal is to help websites detect and block bad bot traffic, vendor says.

4 Cybersecurity Best Practices for Electrical Engineers

Most electrical engineering firms are targeted by threat actors of opportunity because of two necessary ingredients: people and computers. These four tips will help keep you safer.

Wyoming Hospital the Latest to Be Hit With Ransomware Attack

A attack has had a significant impact on the operations of Wyoming's Campbell County Memorial Hospital.

Microsoft Defender Bug Fixed with Emergency Patch

A second out-of-band patch issued this week addresses a denial-of-service vulnerability in Microsoft Defender.

Metasploit Creator HD Moore's Latest Hack: IT Assets

Moore has built a network asset discovery tool that wasn't intended to be a pure security tool, but it addresses a glaring security problem.

The 20 Worst Metrics in Cybersecurity

Security leaders are increasingly making their case through metrics, as well they should - as long as they're not one of these.

Ransomware Strikes 49 School Districts & Colleges in 2019

The education sector has seen 10 new victims in the past nine days alone, underscoring a consistent trend throughout 2019.

EDITORS' CHOICE

7 Ways VPNs Can Turn from Ally to Threat

VPNs are critical pieces of the security infrastructure, but they can be vulnerable, hackable, and weaponized against you. Here are seven things to be aware of before you ignore your VPN.

6 Best Practices for Performing Physical Penetration Tests

A cautionary tale from a pen test gone wrong in an Iowa county courthouse.

NEW FROM THE EDGE

'Playing Around' with Code Keeps Security, DevOps Skills Sharp

A project intended to move a small robot around a hazardous board teaches some solid security lessons.

7 Threats & Disruptive Forces Changing the Face of Cybersecurity