Dark Reading Weekly -- March 04, 2021

More Details Emerge on the Microsoft Exchange Server Attacks

The attacks seem more widespread than initially reported, researchers say, and a look at why the Microsoft Exchange Server zero-days patched this week are so dangerous.

Microsoft Fixes Exchange Server Zero-Days Exploited in Active Attacks

Microsoft fixes multiple Exchange Server vulnerabilities being weaponized in attacks from a group it believes operates out of China.

'ObliqueRAT' Now Hides Behind Images on Compromised Websites

'Transparent Tribe' has switched its tactics for distributing the remote access Trojan, researchers found.

4 Ways Health Centers Can Stop the Spread of Cyberattacks

Health centers must shift the perception of cyberattacks from potential risk to real threat in order to take the first step toward a safer, healthier security posture.

NSA Releases Guidance on Zero-Trust Architecture

A new document provides guidance for businesses planning to implement a zero-trust system management strategy.

How SolarWinds Busted Up Our Assumptions About Code Signing

With so much automation in code writing process, results are rarely double-checked, which opens the door to vulnerabilities and downright danger.

Okta to Buy Rival Auth0

The deal, valued at $6.5 billion, will bring together competitors in the identity management space.

Intel: More Than 90% of Our Vulnerabilities Found via Research

Internal research and external bug-bounty programs combined to discover the vast majority of reported security issues in the company's software.

Cybercrime 'Help Wanted': Job Hunting on the Dark Web

How's your 'Probiv'? How about customer service? Here's how Dark Web forums connect cybercriminals looking for talent with those looking for work -- and which skills are hot right now.

CISA to Federal Agencies: Immediately Patch or 'Disconnect' Microsoft Exchange Servers

The US Department of Homeland Security agency's new emergency directive comes in the wake of major zero-day attacks on email servers revealed by Microsoft this week.

EDITORS' CHOICE

8 Ways Ransomware Operators Target Your Network

Security researchers explore how criminals are expanding their arsenals with new, more subtle, and more effective ransomware attack techniques.

Why Cloud Security Risks Have Shifted to Identities and Entitlements

Traditional security tools focus on the network perimeter, leaving user and service accounts vulnerable to hackers.

Name That Edge Toon: In Hot Water

Feeling creative? Submit your caption in the comments, and our panel of experts will reward the winner with a $25 Amazon gift card.

2021 Top Enterprise IT Trends