Dark Reading Daily -- July 17, 2019

US Mayors Commit to Just Saying No to Ransomware

The group of more than 1,400 top elected municipal officials takes the admirable, recommended stance against paying ransoms. However, can towns and cities secure their information technology infrastructure to withstand attacks?

Security Snapshot: OS, Authentication, Browser & Cloud Trends

New research shows cloud apps are climbing, SMS authentication is falling, Chrome is the enterprise browser favorite, and Android leads outdated devices.

How Attackers Infiltrate the Supply Chain & What to Do About It

With some security best practices, enterprises can significantly reduce the chances that a potential supply chain attack will affect business operations.

Lenovo NAS Firmware Flaw Exposes Stored Data

More than 5,100 vulnerable devices containing multiple terabytes of data are open to exploitation, researchers found.

Is 2019 the Year of the CISO?

The case for bringing the CISO to the C-suite's risk and business-strategy table.

FBI Publishes GandCrab Decryption Keys

Publishing the keys should render existing versions of the ransomware far less dangerous for victims.

Symantec Builds Out Cloud Portfolio to Enforce 'Zero Trust'

New additions to its Integrated Cyber Defense Platform aim to give businesses greater control over access to cloud resources and applications.

10 Ways to Keep a Rogue RasPi From Wrecking Your Network

A Raspberry Pi attached to the network at NASA JPL became the doorway for a massive intrusion and subsequent data loss. Here's how to keep the same thing from happening to your network.

Coast Guard Warns Shipping Firms of Maritime Cyberattacks

A commercial vessel suffered a significant malware attack in February, prompting the US Coast Guard to issues an advisory to all shipping companies: Here be malware.

Software Developers Face Secure Coding Challenges

Seven in ten developers are expected to write secure code, but less than half receive feedback on security, a survey finds.

EDITORS' CHOICE

Where Businesses Waste Endpoint Security Budgets

Too many systems, failure to test tools, and fear of replacement drive endpoint complexity and render products less effective.

NEW FROM THE EDGE

GDPR: The Good, the Bad, and the Uncertain

One year post-GDPR implementation it's time to ask the tough question of whether companies are celebrating or cursing these consumer privacy mandates.

Building and Managing an IT Security Operations Program