Dark Reading Daily -- September 13, 2019

APIs Get Their Own Top 10 Security List

OWASP's new list of API weaknesses focuses on issues that have caused recent data breaches and pose common security hazards in modern cloud-based applications.

Instagram Bug Put User Account Details, Phone Numbers at Risk

The vulnerability, now patched, is the latest in a series of bad news for Facebook.

Indictments Do Little to Stop Iranian Group from New Attacks on Universities

Cobalt Dickens targeted more than 60 universities in the US and elsewhere this summer, according to a new report.

A Definitive Guide to Crowdsourced Vulnerability Management

Knowing about a bug and actually securing it are very different things. These six steps will get you from "oh, sh*t" to fixed.

The Fight Against Synthetic Identity Fraud

Advanced data and innovative technology will help organizations more easily identify abnormal behavior and tell legitimate customers apart from "fake" ones.

NetCAT Vulnerability Is Out of the Bag

Researchers discover a side-channel vulnerability that exploits the network performance-enhancing capabilities of recent Intel server CPUs.

North Korea Seen Using ELECTRICFISH, BADCALL Malware Variants

The FBI and CISA issued an alert the same week researchers disclosed a new campaign launched by actors with North Korean ties.

New Technique Makes Passwords 14M Percent Harder to Crack, Nonprofit Claims

Tide's method for protecting passwords splinters them up into tiny pieces and stores them on distributed nodes.

Chinese Group Built Advanced Trojan by Reverse Engineering NSA Attack Tool

APT3 quietly monitored an NSA attack on its systems and used the information to build a weapon of its own.

More Than 99% of Cyberattacks Need Victims' Help

Research highlights how most criminals exploit human curiosity and trust to click, download, install, open, and send money or information.

EDITORS' CHOICE

Security Leaders Share Tips for Boardroom Chats

Cisco, Oracle, and LinkedIn security leaders share their challenges in communicating with business teams and advice for how CISOs can navigate the relationship.

NEW FROM THE EDGE

Escaping Email: Unlocking Message Security for SMS, WhatsApp

Messaging is growing in importance as dislike for email increases. That means knowing how to protect critical data in the messaging era is a must for IT security.

7 Threats & Disruptive Forces Changing the Face of Cybersecurity