Dark Reading Daily -- August 22, 2019

State-Sponsored Cyberattacks Target Medical Research

Cancer research is a particular target among Chinese espionage groups, says security firm FireEye.

Silence APT Group Broadens Attacks on Banks, Gets More Dangerous

Over the past year, the financial damage linked to the Russian-speaking threat group has spiked fivefold, Group-IP says.

New FISMA Report Shows Progress, Gaps in Federal Cybersecurity

No major incidents mixed with continuing gaps in implementation paint an improving, but still muddy, picture of cybersecurity in the federal government.

MoviePass Leaves Credit Card Numbers, Personal Data Exposed Online

Thousands of customers' credit card numbers, MoviePass card numbers, and sensitive data were left in an unprotected database.

'Box Shield' Brings New Security Controls

New controls and threat detection capabilities built into Box aim to prevent accidental data leakage and misuse.

'Phoning Home': Your Latest Data Exfiltration Headache

Companies phone enterprise customer data home securely and for a variety of perfectly legitimate and useful reasons. The problems stem from insufficient disclosure.

Ransomware Hits Fortnite Players

Ransomware masquerading as game "cheats" is hitting Fortnite players. Fortunately, there are ways to recover without paying a ransom.

New Confidential Computing Consortium Includes Google, Intel, Microsoft

The Linux Foundation plans to form a community to "define and accelerate" the adoption of confidential computing.

Splunk Buys SignalFx for $1.05 Billion

Deal will yield 'one platform that can monitor the entire enterprise application lifecycle,' Splunk CEO says.

Towns Across Texas Hit in Coordinated Ransomware Attack

The state government and cybersecurity groups have mobilized to respond to a mass ransomware attack that simultaneously hit 22 different towns statewide.

More Than 20 Data Breaches Reported Per Day in First Half of 2019

But incidents involving SSNs, addresses, birth dates were smaller than in previous years.

Tough Love: Debunking Myths about DevOps & Security

It's time to move past trivial 'shift left' conceptions of DevSecOps and take a hard look at how security work actually gets accomplished.

EDITORS' CHOICE

7 Big Factors Putting Small Businesses At Risk

Small organizations still face a long list of security threats. These threats and vulnerabilities should be top of mind.

NEW FROM THE EDGE

How to Avoid Technical Debt in Open Source Projects

Engineering teams have only a certain amount of capacity. Cutting down the volume of rework inherent in the open source business model begins with three best practices.

FROM THE DARK READING NEWS DESK @BLACK HAT USA

eSentire Blends Managed Detection Response With Machine Learning

While many infosec pros believe they're getting managed detection response (MDR) from their managed security service providers, that's not necessarily the case, according to Eldon Sprickerhoff, Founder and Chief Innovation Officer of eSentire. Adding machine learning to the mix helps automate MDR, strengthening an organization's security posture.

7 Threats & Disruptive Forces Changing the Face of Cybersecurity