Dark Reading Weekly -- December 24, 2020

Amazon Gift Card Scam Delivers Dridex This Holiday Season

Dridex operators launch a social engineering scam that promises victims a $100 gift card but delivers a banking Trojan.

SolarWinds Campaign Focuses Attention on 'Golden SAML' Attack Vector

Adversaries that successfully execute attack can achieve persistent anytime, anywhere access to a victim network, security researchers say.

Lazarus Group Seeks Intelligence Related to COVID-19

Researchers attribute attacks targeting a pharmaceutical company and a government ministry related to COVID-19 response.

Emotet Campaign Restarts After Seven-Week Hiatus

Multiple security researchers note the return of an email campaign attempting to spread the malware, which is often used to drop the Ryuk ransomware and Trickbot banking Trojan.

We Have a National Cybersecurity Emergency -- Here's How We Can Respond

Let's prioritize bipartisan strategic actions that can ensure our national security and strengthen the economy. Here are five ideas for how to do that.

Prepare to Fight Upcoming Cyber-Threat Innovations

Cybercriminals are preparing to use computing performance innovations to launch new types of attacks.

Quarterbacking Vulnerability Remediation

It's time that security got out of the armchair and out on the field.

Security as Code: How Repeatable Policy-Driven Deployment Improves Security

The SaC approach lets users codify and enforce a secure state of application configuration deployment that limits risk.

Cisco, Intel, Deloitte Among Victims of SolarWinds Breach: Report

The Wall Street Journal identified 24 businesses so far that have downloaded the SolarWinds software infected with malicious code.

Law Enforcement Disrupts VPN Services Enabling Cybercrime

The United States and international partners shut down three bulletproof hosting services used to facilitate criminal activity.

Microsoft, McAfee, Rapid7, and Others Form New Ransomware Task Force

Industry group wants to get a framework in the hands of the new administration's cybersecurity officials by early spring 2021.

2021 Cybersecurity Predictions: The Intergalactic Battle Begins

There's much in store for the future of cybersecurity, and the most interesting things aren't happening on Earth.

NSA, CISA Warn of Attacks on Federated Authentication

While incident responders focus on attacks using SolarWinds Orion, government cyber defenders highlight other methods likely being used as well.

EDITORS' CHOICE

5 Key Takeaways From the SolarWinds Breach

New details continue to emerge each day, and there may be many more lessons to learn from what could be among the largest cyberattacks ever.

Rising to the Challenge: Perspectives from Security Leaders on 2020 and Beyond

For those who work in the security industry 2020 has been a particularly challenging year. Chris Price talks to five industry leaders from different perspectives in the sector about how they coped with COVID and asks them to look forward to 2021.

LATEST FROM THE EDGE

Delivering Santa from Third-Party Risk

2020 has made even St. Nick susceptible to the risks associated with the coronavirus pandemic. Fortunately, cybersecurity experts are ready to help the merry old elf with advice on reducing risks to his global operations.

7 Infamous Moments in Adobe Flash's Security History

End-of-life is here: Adobe's support for Flash is gone as of Jan. 1. Here's what we won't miss about the multimedia software platform.

2020: The Year in Security