Dark Reading Weekly -- May 23, 2019

How a Manufacturing Firm Recovered from a Devastating Ransomware Attack

The infamous Ryuk ransomware slammed a small company that makes heavy-duty vehicle alternators for government and emergency fleet. Here's what happened.

Q1 2019 Smashes Record For Most Reported Vulnerabilities in a Quarter

Once again, a high-proportion of the reported flaws have no current fix, according to Risk Based Security.

DDoS Attacks Up in Q1 After Months of Steady Decline

Sudden surge suggests that new actors have stepped up to the plate to replace the old operators.

Proving the Value of Security Awareness with Metrics that 'Deserve More'

Without metrics that matter to the business, awareness programs will continue to be the bastard child of security.

Satan Ransomware Adds More Evil Tricks

The latest changes to the Satan ransomware framework demonstrate attackers are changing their operations while targeting victims more carefully.

Demystifying the Dark Web: What You Need to Know

The Dark Web and Deep Web are not the same, neither is fully criminal, and more await in this guide to the Internet's mysterious corners.

97% of Americans Can't Ace a Basic Security Test

Still, a new Google study uncovers a bit of good news, too.

Attackers Are Messing with Encryption Traffic to Evade Detection

Unknown groups have started tampering with Web traffic encryption, causing the number of fingerprints for connections using Transport Layer Security to jump from 19,000 to 1.4 billion in less than a year.

When Older Windows Systems Won't Die

Microsoft's decision to patch unsupported machines for the critical CVE-2019-0708 flaw is a reminder that XP, 2003, and other older versions of Windows still run in some enterprises.

EDITORS' CHOICE

What You Need to Know About Zero Trust Security

The zero trust model might be the answer to a world in which perimeters are made to be breached. Is it right for your organization?

The Data Problem in Security

CISOs must consider reputation, resiliency, and regulatory impact to establish their organization's guidelines around what data matters most.

Building and Managing an IT Security Operations Program