Dark Reading Daily -- December 04, 2020

Potential Nation-State Actor Targets COVID-19 Vaccine Supply Chain

Companies involved in technologies for keeping vaccines cold enough for safe storage and transportation are being targeted in a sophisticated spear-phishing campaign, IBM says.

Researchers Bypass Next-Generation Endpoint Protection

Machine learning-based products can be tricked to classify malware as a legitimate file, new findings show.

TrickBot's New Tactic Threatens Firmware

A newly discovered module checks machines for flaws in the UEFI/BIOS firmware so malware can evade detection and persist on a device.

Researchers Discover New Obfuscation-As-a-Service Platform

Researchers detail how a Android APK obfuscation service automates detection evasion for highly malicious apps.

Cloud Security Threats for 2021

Most of these issues can be remediated, but many users and administrators don't find out about them until it's too late.

From FUD to Fix: Why the CISO-Vendor Partnership Needs to Change Now

CISOs and their staffs are up against too many systems, screens, and alerts, with too few solutions to effectively address pain points.

US Officials Take Action Against 2,300 Money Mules

Eight federal law enforcement agencies participated in the Money Mule Initiative, a global crackdown on money laundering.

Common Container Manager Is Vulnerable to Dangerous Exploit

Container manager vulnerability is one of several weaknesses and vulnerabilities recently disclosed for Docker.

Google Security Researcher Develops 'Zero-Click' Exploit for iOS Flaw

A new patched memory corruption vulnerability in Apple's AWDL protocol can be used to take over iOS devices that are in close proximity to an attacker.

Why I'd Take Good IT Hygiene Over Security's Latest Silver Bullet

Bells and whistles are great, but you can stay safer by focusing on correct configurations, posture management, visibility, and patching.

Cybersecurity in the Biden Administration: Experts Weigh In

Security pros and former government employees share their expectations and concerns for the new administration - and their hope for a "return to normal."

EDITORS' CHOICE

2020 Cybersecurity Holiday Gift Guide for Kids

Grab some wrapping paper: These STEM toys and games are sure to spark creativity and hone coding and logic skills among a future generation of cybersecurity pros.

Automated Pen Testing: Can It Replace Humans?

These tools have come a long way, but are they far enough along to make human pen testers obsolete?

LATEST FROM THE EDGE

Loyal Employee ... or Cybercriminal Accomplice?

Can the bad guys' insider recruitment methods be reverse-engineered to reveal potential insider threats? Let's take a look.

2021 Top Enterprise IT Trends