Dark Reading Daily -- December 03, 2020

Google Security Researcher Develops 'Zero-Click' Exploit for iOS Flaw

A new patched memory corruption vulnerability in Apple's AWDL protocol can be used to take over iOS devices that are in close proximity to an attacker.

Open Source Flaws Take Years to Find But Just a Month to Fix

Companies need to embrace automation and dependency tracking to keep software secure, GitHub says in its annual security report.

Cybersecurity in the Biden Administration: Experts Weigh In

Security pros and former government employees share their expectations and concerns for the new administration - and their hope for a "return to normal."

Unmanaged Devices Heighten Risks for School Networks

Gaming consoles, Wi-Fi Pineapples, and building management systems are among many devices Armis says it discovered on K-12 school networks.

Free Mobile App Measures Your Personal Cyber Risk

New app for Android and Apple iOS uses an algorithm co-developed with MIT to gauge security posture on an ongoing basis.

Why I'd Take Good IT Hygiene Over Security's Latest Silver Bullet

Bells and whistles are great, but you can stay safer by focusing on correct configurations, posture management, visibility, and patching.

Automated Pen Testing: Can It Replace Humans?

These tools have come a long way, but are they far enough along to make human pen testers obsolete?

Security Slipup Exposes Health Records & Lab Results

NTreatment failed to add password protection to a cloud server, exposing thousands of sensitive medical records online.

FBI: BEC Scammers Could Abuse Email Auto-Forwarding

Private Industry Notification warns of the role email auto-forwarding could be used in business email compromise attacks.

Malicious or Vulnerable Docker Images Widespread, Firm Says

A dynamic analysis of the publicly available images on Docker Hub found that 51% had critical vulnerabilities and about 6,500 of the 4 million latest images could be considered malicious.

Manchester United Cyberattack Highlights Controversy in Paying Ransomware Attackers

The Premier League English football (soccer) club team is reportedly being held to ransom by cyberattackers. Manchester United may face a difficult decision: whether to pay a ransom for release of its stolen data.

Inside North Korea's Rapid Evolution to Cyber Superpower

Researchers examine North Korea's rapid evolution from destructive campaigns to complex and efficient cyber operations.

EDITORS' CHOICE

2020 Cybersecurity Holiday Gift Guide for Kids

Grab some wrapping paper: These STEM toys and games are sure to spark creativity and hone coding and logic skills among a future generation of cybersecurity pros.

Failing Toward Zero: Why Your Security Needs to Fail to Get Better

Each security incident should lead to a successive reduction in future incidences of the same type. Organizations that fail toward zero embrace failure and learn from their mistakes.

LATEST FROM THE EDGE

Loyal Employee ... or Cybercriminal Accomplice?

Can the bad guys' insider recruitment methods be reverse-engineered to reveal potential insider threats? Let's take a look.

2021 Top Enterprise IT Trends