Dark Reading Daily -- October 07, 2020

New Research Finds Bugs in Every Anti-Malware Product Tested

Products from every vendor had issues that allowed attackers to elevate privileges on a system -- if they already were on it.

How Netflix Makes Security Decisions: A Peek Inside the Process

A senior information security risk engineer explains how Netflix's risk management program helps businesses leaders make key decisions.

Verizon Payment Security Report is a Wake-up Call: Time to Refocus on PCI DSS Compliance

Too many organizations fail to enact the baseline payment security controls, according to the Verizon 2020 Payment Security Report, and the recent Blackbaud ransomware incident is merely the latest evidence.

Malware for Ad Fraud Gets More Sophisticated

Facebook says SilentFade campaign disabled notifications that could have warned users that their accounts had been compromised.

Do's and Don'ts for School Cybersecurity Awareness

Remote learning has introduced an array of new cyberthreats to American families and schools, but this can be an educational moment for all involved.

Zerologon Vulnerability Used in APT Attacks

MERCURY, the Iranian advanced persistent threat group, is using Zerologon in a new series of attacks detected by Microsoft.

Google Brings Password Protection to iOS, Android in Chrome 86

Chrome 86 will alert users when stored passwords are compromised, and block or warn of insecure downloads, among other security updates.

A Guide to the NIST Cybersecurity Framework

With cybersecurity threats growing exponentially, it has never been more important to put together an efficient cyber-risk management policy, and NIST's framework can help.

The No Good, Very Bad Week for Iran's Nation-State Hacking Ops

A look at the state of Iran's cyber operations as the US puts the squeeze on it with a pile of indictments and sanctions.

Singapore Asks Big Cybersecurity Questions to Improve National Defense

An executive from Singapore's Cyber Security Agency examines the role of security in a nation increasingly dependent on technology.

EDITORS' CHOICE

6 Best Practices for Using Open Source Software Safely

Open source software is critical yet potentially dangerous. Here are ways to minimize the risk.

10 Years Since Stuxnet: Is Your Operational Technology Safe?

The destructive worm may have debuted a decade ago, but Stuxnet is still making its presence known. Here are steps you can take to stay safer from similar attacks.

NEW FROM THE EDGE

Rethinking Email Security in the Face of Fearware

E-mail messages preying on fear have ramped up since the COVID-19 outbreak, raising questions about security's reliance on historical data about past attacks to predict the future

Special Report: Computing's New Normal