Dark Reading Daily -- July 31, 2020

Browsers to Enforce Shorter Certificate Life Spans: What Businesses Should Know

Apple, Google, and Mozilla will shorten the life span for TLS certificates in a move poised to aid security but cause operational troubles.

Dark Web Travel Fraudsters Left Hurting From Lockdowns

Shadow travel businesses that depend on loyalty program fraud have been impacted just like the legitimate travel orgs they prey on.

Ill-Defined Career Paths Hamper Growth for IT Security Pros

Appsec and cloud security skills are the most in demand, and a shortage of staff is wearing on security teams, a new study shows.

5 Tips for Optimizing Your Company's Cyber-Crisis Preparedness

Cyber-incident response often addresses short-term needs, but we need to broaden the view of crisis management to be more forward-thinking.

Citizens Are Increasingly Worried About How Companies Use Their Data

With data privacy important to almost every American, more than two-thirds of those surveyed say they don't trust companies to ethically sell their data.

Using the Attack Cycle to Up Your Security Game

Like the universe, the attack surface is always expanding. Here's how to keep up and even get ahead.

Google Adds Security Updates to Chrome Autofill

Chrome users can retrieve payment card numbers via biometric authentication and use a new "touch-to-fill: feature to log in to accounts.

Mimecast Buys MessageControl

The email security provider brings into its fold social engineering and human identity capabilities.

Average Cost of a Data Breach: $3.86 Million

New IBM study shows that security system complexity and cloud migration can amplify breach costs.

Email Security Features Fail to Prevent Phishable 'From' Addresses

The security features for verifying the source of an email header fail to work together properly in many implementations, according to a team of researchers.

Twilio Security Incident Shows Danger of Misconfigured S3 Buckets

Twilio says attackers accessed its misconfigured cloud storage system and altered a copy of the JavaScriptSDK it shares with customers.

EDITORS' CHOICE

11 Security Tools to Expect at the Black Hat USA 2020 Arsenal Virtual Event

More than 130 security researchers and developers are ready to showcase their work.

Black Hat Virtually: An Important Time to Come Together as a Community

The significance of this year's event hasn't changed a whit. It's an opportunity to share what we've learned, and plan how to protect each other and the public for the remainder of the pandemic and beyond.

NEW FROM THE EDGE

How to Decipher InfoSec Job Titles' Mysteries

Figuring out which cybersecurity job you want -- or are qualified for -- can be difficult when words have no consistent meaning in the industry.

Special Report: Computing's New Normal, a Dark Reading Perspective