Dark Reading Daily -- September 16, 2021

OMIGOD: Azure Users Warned of Critical OMI Vulnerabilities

Security researchers share the details of four flaws in Open Management Infrastructure, which is deployed on a large number of Linux virtual machines in Azure.

How Attackers Invest in Cloud-Focused Cybercrime

A new study reveals an active underground market for access credentials to tens of thousands of cloud accounts and resources.

OWASP Reshuffles Its Top 10 List, Adds New Categories

The Open Web Application Security Project reshuffles its list of top threats, putting broken access controls and cryptographic failures at the top and creating three new risk categories.

How Your Printer Is Like Swiss Cheese

Follow these best practices to avoid the security holes created by these often-overlooked, but ubiquitous, devices.

Purchasing Managed Security Services: Strategies for Client References

There's a scarcity of customers using managed security services who are willing to talk to others about their experiences. Here's how to work with your vendor(s) to leverage their customers' experiences and hard-won wisdom.

(Sponsored Article) Increasingly, Cyber Resiliency Depends Upon Zero-Trust Implementation

Changes in how we work brought about by COVID-19 present the opportunity to implement zero-trust architectures to meet new and evolving cyber threats.

Microsoft Lets Users Fully Remove Account Passwords

Users can now delete passwords from their Microsoft account and instead use Windows Hello, Microsoft Authenticator, or physical security keys to log in.

ExpressVPN Acquired By Kape Technologies for $936 Million

Privacy firm Kape says deal will double customer base and broaden reach into consumer VPN market

Groove Ransomware Gang Tries New Tactic to Attract Affiliates

The threat group, which leaked some 500,000 credentials for Fortinet SSL VPN devices, views ransomware as just one way to profit from compromised networks, experts say.

4 Steps for Fostering Collaboration Between IT Network and Security Teams

Successful collaboration requires a four-pronged approach that considers operations and infrastructure, leverages shared data, supports new workflows, and is formalized with documentation.

Name That Toon: Congrats! It's a ...

Feeling creative? Submit your caption and our panel of experts will reward the winner with a $25 Amazon gift card.

EDITORS' CHOICE

Nearly 50% of On-Premises Databases Have Vulnerabilities

A network compromise shouldn't mean "game over" for corporate data, but survey data shows many companies fail to protect their crown jewels.

Magecart: How Its Attack Techniques Evolved

Shape-shifting Magecart has shown itself to be highly adaptable in its ability to compromise third-party websites, especially during the pandemic.

LATEST FROM THE EDGE

A Ransomware Recovery Plan That's Solid Gold

Having a gold copy of critical data offline is essential in every organization's disaster recovery or continuity plan. Follow the 3-2-1-1 rule for creating and securing your organization's data.

Enterprise Cybersecurity Plans in a Post-Pandemic World