Avatar
Dark Reading
f9e52ebe8a51b90fdaacc735e822d6ee358d91dad406768f80af646b7c85d797
Dark Reading: Connecting the Information and Security Community

Maine Department of Labor to Announce the Launch of University of Maine at Augusta Cybersecurity and IT Registered Apprenticeship Program

https://www.darkreading.com/operations/maine-department-of-labor-to-announce-the-launch-of-university-of-maine-at-augusta-cybersecurity-and-it-registered-apprenticeship-program

4 Pillars for Building a Responsible Cybersecurity Disclosure Program

Responsible disclosure must strike a balance between the immediate need to protect users and the broader security implications for the entire community.

https://www.darkreading.com/risk/4-pillars-for-building-a-responsible-cybersecurity-disclosure-program

Amidst MGM, Caesar's Incidents, Attackers Focus on Luxury Hotels

A fast-growing cyber campaign solely takes aim at luxury hotel and resort chains, using security-disruptive tactics to spread info-stealing malware.

https://www.darkreading.com/cloud/mgm-caesars-incidents-attackers-luxury-hotels

Chad Taps Huawei for Digital Modernization Project

Fiber optic networks and better connectivity for Chad's users are part of the ICT modernization project with the Chinese networking giant.

https://www.darkreading.com/dr-global/chad-huawei-digital-modernization-project

Proactive Security: What It Means for Enterprise Security Strategy

Proactive Security holds the elusive promise of helping enterprises finally get ahead of threats, but CISOs must come to grips with the technological and philosophical change that it brings.

https://www.darkreading.com/omdia/proactive-security-what-it-means-for-enterprise-security-strategy

When It Comes to Email Security, The Cloud You Pick Matters

While cloud-based email offers more security than on-premises, insurance firms say it matters whether you use Microsoft 365 or Google Workspace.

https://www.darkreading.com/dr-tech/when-it-comes-to-email-security-the-cloud-you-pick-matters

Xenomorph Android Malware Targets Customers of 30 US Banks

The Trojan had mainly been infecting banks in Europe since it first surfaced more than one year ago.

https://www.darkreading.com/remote-workforce/xenomorph-android-malware-targets-customers-of-30-us-banks

UAE-Linked 'Stealth Falcon' APT Mimics Microsoft in Homoglyph Attack

The cyberattackers are using the "Deadglyph" custom spyware, whose full capabilities have not yet been uncovered.

https://www.darkreading.com/dr-global/stealth-falcon-apt-microsoft-homoglyph-attack

MOVEit Flaw Leads to 900 University Data Breaches

National Student Clearinghouse, a nonprofit serving thousands of universities with enrollment services, exposes more than 900 schools within its MOVEit environment.

https://www.darkreading.com/application-security/moveit-flaw-900-university-data-breaches

The Hot Seat: CISO Accountability in a New Era of SEC Regulation

Updated cybersecurity regulations herald a new era of transparency and accountability in the face of escalating industry vulnerabilities.

https://www.darkreading.com/risk/hot-seat-ciso-accountability-in-new-era-of-sec-regulation

Cyber Hygiene: A First Line of Defense Against Evolving Cyberattacks

Back to basics is a good start, but too often security teams don't handle their deployment correctly. Here's how to avoid the common pitfalls.

https://www.darkreading.com/microsoft/cyber-hygiene-a-first-line-of-defense-against-evolving-cyber-attacks

Don't Get Burned by CAPTCHAs: A Recipe for Accurate Bot Protection

Traditional CAPTCHAs, such as reCAPTCHA, no longer protect online businesses adequately. Real users hate them. Bots bypass them. It's time to upgrade.

https://www.darkreading.com/attacks-breaches/don-t-get-burned-by-captchas-a-recipe-for-accurate-bot-protection

Do CISOs Have to Report Security Flaws to the SEC?

The new SEC rules make it seem that there is no need to report the presence of security vulnerabilities, but that doesn't quite tell the full story.

https://www.darkreading.com/edge/do-cisos-have-to-report-security-flaws-to-the-sec

TikTok API Rules Stymie Analysis of US User Data, Academics Say

Terms of service for API access give TikTok publication review over findings and limit access to critical data on the platform's impact on US users, researchers say.

https://www.darkreading.com/application-security/tiktok-api-rules-stymie-analysis-of-us-user-data-academics-warn

Hackers Let Loose on Voting Gear Ahead of US Election Season

Ethical hackers were given voluntary access to digital scanners, ballot markers, and electronic pollbooks, all in the name of making the voting process more resilient to cyber threats.

https://www.darkreading.com/ics-ot/hackers-let-loose-voting-gear-us-election-season