Dark Reading Weekly -- September 17, 2020

Rethinking Resilience: Tips for Your Disaster Recovery Plan

As more organizations face disruptions, a defined approach to recovery is imperative so they can successfully recover, experts say.

Meet the Computer Scientist Who Helped Push for Paper Ballots

Security Pro File: Award-winning computer scientist and electronic voting expert Barbara Simons chats up her pioneering days in computer programming, paper-ballot backups, Internet voting, math, and sushi.

7 Cybersecurity Priorities for Government Agencies & Political Campaigns

As election season ramps up, organizations engaged in the process must strengthen security to prevent chaos and disorder from carrying the day. Here's how.

Large Cloud Providers Much Less Likely Than Enterprises to Get Breached

Pen-test results also show a majority of organizations have few protections against attackers already on the network.

Open Source Security's Top Threat and What To Do About It

With open source developers regularly churning out new tools, the risk landscape has become too fragmented to properly monitor.

DDoS Attacks Rose 151% in First Half of 2020

Attacks grew in number, size, and sophistication as the coronavirus pandemic took hold.

COVID-19: Latest Security News & Commentary

Check out Dark Reading's updated, exclusive news and commentary surrounding the coronavirus pandemic.

Legality of Security Research to be Decided in US Supreme Court Case

A ruling that a police officer's personal use of a law enforcement database is "hacking" has security researchers worried for the future.

CISA Issues Alert for Microsoft Netlogon Vulnerability

CISA has issued an alert following the discovery of publicly available exploit code for Windows elevation of privilege flaw CVE-2020-1472.

Spear-Phishers Leverage Office 365 Ecosystem to Validate Stolen Creds in Real Time

New attack technique uses Office 365 APIs to cross-check credentials against Azure Active Directory as victim types them in.

EDITORS' CHOICE

6 Lessons IT Security Can Learn From DevOps

DevOps has taken over enterprise software development. The discipline has lessons for IT security -- here are a quick half-dozen.

Taking Security With You in the WFH Era: What to Do Next

As many organizations pivot to working from home, here are some considerations for prioritizing the new security protocols.

NEW FROM THE EDGE

h2c Smuggling: A New 'Devastating' Kind of HTTP Request

The newly discovered form of HTTP request smuggling could have widespread impact because any proxy can be affected, researchers say. Here's what infosec pros should know.

5 Security Lessons Humans Can Learn From Their Dogs

Without the right reinforcements, you could be barking at the moon.

7 New Cybersecurity Vulnerabilities That Could Put Your Enterprise at Risk