Dark Reading Daily -- September 06, 2019

New Technique Makes Passwords 14M Percent Harder to Crack, Nonprofit Claims

Tide's method for protecting passwords splinters them up into tiny pieces and stores them on distributed nodes.

Attackers Hit Ceiling in Ransomware Demands

New Bedford, Massachusetts' refusal to pay a $5.3 million ransom highlights how victim towns and cities may be hitting the limit to what they're willing to spend to speed recovery.

Crimeware: How Criminals Built a Business to Target Businesses

A new report investigates the evolution of crimeware, how businesses underestimate the threat, and why they should be concerned.

Automation: Friend of the SOC Analyst

Faced by increasingly sophisticated threats, organizations are realizing the benefits of automation in their cybersecurity programs.

It's Not Healthy to Confuse Compliance with Security

Healthcare organizations should be alarmed by the frequency and severity of cyberattacks. Don't assume you're safe from them just because you're compliant with regulations.

419M Facebook User Phone Numbers Publicly Exposed

It's still unclear who owned the server storing hundreds of millions of records online without a password.

Security Pros and 'Black Hats' Agree on Most Tempting Targets

Malicious actors look for accounts that are springboards to other systems, according to nearly 300 attendees of Black Hat USA.

Meet FPGA: The Tiny, Powerful, Hackable Bit of Silicon at the Heart of IoT

Field-programmable gate arrays are flexible, agile-friendly components that populate many infrastructure and IoT devices - and have recently become the targets of researchers finding vulnerabilities.

'It Takes Restraint': A Seasoned CISO's Sage Advice for New CISOs

Todd Fitzgerald wrote the books on being a chief information security officer. Here he offers tips on what to do and what not to do in the first few months of a new CISO job.

Phishing Campaign Uses SharePoint to Slip Past Defenses

Cybercriminals targeting financial institutions in the UK bypassed Symantec email gateway and other perimeter technologies.

EDITORS' CHOICE

7 Steps to Web App Security

Emerging technologies are introducing entirely new ways to reach, act, and interact with people. That makes app security more important than ever.

NEW FROM THE EDGE

8 Ways To Spot an Insider Threat

The good news is most insider threats derive from negligence, not malicious intent. The bad news is the frequency of negligence is already ahead of where it was in 2018.

7 Threats & Disruptive Forces Changing the Face of Cybersecurity