Dark Reading Daily -- January 15, 2020

Microsoft Patches Windows Vuln Discovered by the NSA

The National Security Agency is publicly acknowledged for its finding and reporting of CVE-2020-0601, marking the start of what it says is a new approach to security.

Dustman Attack Underscores Iran's Cyber Capabilities

For nearly six months, an attack group linked to Iran reportedly had access to the network of Bahrain's national oil company, Bapco, before it executed a destructive payload.

Attackers Increasingly Focus on Business Disruption

Network intruders are staying undetected for an average of 95 days, enabling them to target critical systems and more completely disrupt business.

Cloud Adoption & Technology Change Create Gaps in Enterprise Security

Many companies are struggling to get a handle on risk exposure because of visibility issues, Radware survey shows.

Industrial Control System Features at Risk

How some ICS product functions can be weaponized by altering their configurations.

'Fancy Bear' Targets Ukrainian Oil Firm Burisma in Phishing Attack

The oil & gas company is at the heart of the ongoing US presidential impeachment case.

Global Predictions for Energy Cyber Resilience in 2020

How prepared is the energy sector for an escalating attack surface in the operating technology environment? Here are five trends to watch.

Google: Chrome Will Remove Third-Party Cookies and Tracking

It's "not about blocking" but removing them altogether, the company said.

Consumer Reports Calls for IoT Manufacturers to Raise Security Standards

A letter to 25 companies says Consumer Reports will change ratings to reflect stronger security and privacy standards.

6 Unique InfoSec Metrics CISOs Should Track in 2020

You might not find these measurements on a standard cybersecurity department checklist. But they can help evaluate risks you haven't even considered yet.

Chinese Malware Found Preinstalled on US Government-Funded Phones

Researchers found unremovable malware preinstalled in the Unimax U686CL, a budget Android device sold by Assurance Wireless.

Major Brazilian Bank Tests Homomorphic Encryption on Financial Data

The approach allowed researchers to use machine learning on encrypted data without first decrypting it.

EDITORS' CHOICE

7 Free Tools for Better Visibility Into Your Network

It's hard to protect what you don't know is there. These free tools can help you understand just what it is that you need to protect -- and need to protect yourself from.

Processor Vulnerabilities Put Virtual Workloads at Risk

Meltdown, Spectre exploits will likely lead to customers making tradeoffs between performance and security of applications, especially virtual and cloud-based apps

NEW FROM THE EDGE

How to Keep Security on Life Support After Software End-of-Life

It's the end of support this week for Windows 7 and Server 2008. But what if you truly can't migrate off software, even after security updates stop coming?

The Year in Security: 2019