Dark Reading Daily -- May 16, 2019

GDPR Drives Changes, but Privacy by Design Proves Elusive

One year later, the EU mandate's biggest impact has been to focus more attention on data protection and privacy, security analysts say.

Microsoft Builds on Decentralized Identity Vision

The company elaborates on its plan to balance data control between businesses and consumers by giving more autonomy to individuals.

New Intel Vulnerabilities Bring Fresh CPU Attack Dangers

Four newly discovered vulns from the speculative-execution family bring Meltdown-like threats to Intel's processors.

Attackers Are Messing with Encryption Traffic to Evade Detection

Unknown groups have started tampering with Web traffic encryption, causing the number of fingerprints for connections using Transport Layer Security to jump from 19,000 to 1.4 billion in less than a year.

Windows 10 Migration: Getting It Right

The transition to Windows 10 doesn't need to be a sprint. Organizations can still take advantage of the security in Windows 7 while gaining added management flexibility from the newer OS.

Two Ransomware Recovery Firms Typically Pay Hackers

Companies promising the safe return of data sans ransom payment secretly pass Bitcoin to attackers and charge clients added fees.

Brush Up on the Latest Security Techniques at Black Hat USA

Learn to set malware lures, pinpoint unintentional but identifying human behaviors, and detect industrial control system attacks via sensor noise.

Baltimore Ransomware Attack Takes Strange Twist

Tweet suggests possible screenshot of stolen city documents and credentials in the wake of attack that took down city servers last week.

Demystifying the Dark Web: What You Need to Know

The Dark Web and Deep Web are not the same, neither is fully criminal, and more await in this guide to the Internet's mysterious corners.

Why AI Will Create Far More Jobs Than It Replaces

Just as spreadsheets and personal computers created a job boom in the '70s, so too will artificial intelligence spur security analysts' ability to defend against advanced threats.

EDITORS' CHOICE

Effective Pen Tests Follow These 7 Steps

Third-party pen tests are part of every comprehensive security plan. Here's how to get the most from this mandatory investment.

Introducing the Digital Transformation Architect

Bet-the-company transformation that expands the attack surface requires close alignment and leadership across executive, IT and security teams.

Building and Managing an IT Security Operations Program