Dark Reading Daily -- September 25, 2020

Malware Attacks Declined But Became More Evasive in Q2

Most of the malware used in attacks last quarter were designed to evade signature-based detection tools, WatchGuard says.

Bluetooth Security Weaknesses Pile Up, While Patching Remains Problematic

Turns out, creating wireless ecosystems for a vast number of different architectures, configurations, and use cases is hard.

Critical Instagram Flaw Could Let Attackers Spy on Victims

A now-patched remote code execution vulnerability could be exploited with a specially sized image file, researchers report.

Solving the Problem With Security Standards

More explicit threat models can make security better and open the door to real and needed innovation.

Since Remote Work Isn't Going Away, Security Should Be the Focus

These three steps will help organizations reduce long-term work-from-home security risks.

Microsoft Warns of Attackers Now Exploiting 'Zerologon' Flaw

The Security Intelligence team at Microsoft is tracking newly waged exploits in the wild.

CrowdStrike Agrees to Acquire Preempt Security for $96M

CrowdStrike plans to use Preempt Security's conditional access technology to strengthen its Falcon platform.

New Google Search Hacks Push Viruses & Porn

Three incidents demonstrate how cybercriminals leverage the scourge of black-hat search engine optimization to manipulate search results.

A Hacker's Playlist

Nine security researchers share their favorite songs and genres.

Remote Work Exacerbating Data Sprawl

More than three-quarters of IT executives worry that data sprawl puts their data at risk, especially with employees working from insecure home networks, survey finds.

EDITORS' CHOICE

12 Bare-Minimum Benchmarks for AppSec Initiatives

The newly published Building Security in Maturity Model provides the software security basics organizations should cover to keep up with their peers.

My Journey Toward SAP Security

When applications are critical to the business's core functions, the CISO and their staff better get the security right.

NEW FROM THE EDGE

Making the Case for Medical Device Cybersecurity

With an increasing number of Internet-connected medical devices in use to manage diabetes, protection against a variety of wireless network attacks could very well be a matter of life and death for patients.

Special Report: Computing's New Normal