Dark Reading Daily -- November 14, 2019

The Ripple Effect of Data Breaches: How Damage Spreads

The financial loss from so-called 'ripple events' is thirteen times greater than the cost of single-party security incidents.

Self-Cleaning Payment Card-Skimmer Infects E-Commerce Sites

'Pipka' JavaScript skimmer has infected at least 16 e-commerce websites so far, according to Visa's Payment Fraud Disruption Group.

Breaches Are Inevitable, So Embrace the Chaos

Avoid sinking security with principles of shipbuilding known since the 15th century.

Unreasonable Security Best Practices vs. Good Risk Management

Perfection is impossible, and pretending otherwise just makes things worse. Instead, make risk-based decisions.

Cybersecurity: An Organizationwide Responsibility

C-suite execs must set an example of good practices while also supporting the IT department with enough budget to protect the organization from next-generation cyberattacks.

New Risk Based Security report shows data breaches up 33.3% over last year so far.

Cardplanet Operator Extradited for Facilitating Credit Card Fraud

Russian national Aleksei Burkov is charged with wire fraud, access device fraud, and conspiracy to commit identity theft, among other crimes.

Find New Talent, Don't Fight Over CISSPs: Insights from (ISC)2 COO

The skills gap will only be closed by attracting and retaining new talent. So don't limit your talent search to CISSPs, says the COO of the organization that issues the CISSP certification.

Ring Flaw Underscores Impact of IoT Vulnerabilities

A vulnerability in Amazon's Ring doorbell cameras would have allowed a local attacker to gain access to a target's entire wireless network.

SHAKEN/STIR: Finally! A Solution to Caller ID Spoofing?

The ubiquitous Caller ID hasn't changed much over the years, but the technology to exploit it has exploded. That may be about to change.

EDITORS' CHOICE

6 Small-Business Password Managers

The right password manager can help bring enterprise-class security to small businesses. Here are a half-dozen candidates to strengthen your access management.

The Myths of Multifactor Authentication

Organizations without MFA are wide open to attack when employees fall for phishing scams or share passwords. What's holding them back?

NEW FROM THE EDGE

Account Fraud Harder to Detect as Criminals Move from Bots to 'Sweat Shops'

Cheap labor, frequent data breaches, and better fraud detection technology are fueling frustrating changes in attackers' methods.

Well, Hello, Dolly!

Eight hours is certainly a start.

7 Threats & Disruptive Forces Changing the Face of Cybersecurity