Dark Reading Daily -- January 20, 2021

Follow Dark Reading:

January 20, 2021

LATEST SECURITY NEWS & COMMENTARY

SolarWinds Attack Underscores 'New Dimension' in Cyber-Espionage Tactics

Meanwhile, Malwarebytes is the latest victim, Symantec discovers a fourth piece of malware used in the massive attack campaign, and FireEye Mandiant releases a free tool to help spot signs of the attack.

Vulnerabilities in Popular DNS Software Allow Poisoning

Seven flaws in DNSMasq have limited impact, but in combination they could be chained to create a multistaged attack.

The Most Pressing Concerns Facing CISOs Today

Building security into the software development life cycle creates more visibility, but CISOs still need stay on top of any serious threats on the horizon, even if they are largely unknown.

A Security Practitioner's Guide to Encrypted DNS

Best practices for a shifting visibility landscape.

Microsoft to Launch 'Enforcement Mode' for Zerologon Flaw

Enforcement mode for the Netlogon Domain Controller will be enabled by default with the Feb. 9 security update.

MORE NEWS & COMMENTARY


HOT TOPICS
Successful Malware Incidents Rise as Attackers Shift Tactics As employees moved to working from home and on mobile devices, attackers followed them and focused on weekend attacks, a security firm says. How to Achieve Collaboration Tool Compliance Organizations must fully understand the regulatory guidance on collaboration security and privacy so they can continue to implement and expand their use of tools such as Zoom and Teams. Who Is Responsible for Protecting Physical Security Systems From Cyberattacks? It's a question that continues to engage debate, as the majority of new physical security devices being installed are now connected to a network. While this offers myriad benefits, it also raises the question: Who is responsible for their cybersecurity? MORE

EDITORS' CHOICE

10 Undergraduate Security Degree Programs to Explore

Colleges and universities are ramping up cybersecurity education with a wider range of degree programs and more resources for students to build their infosec careers.

Vulnerability Management Has a Data Problem

Security teams have an abundance of data, but most of it lacks the context necessary to improve remediation outcomes.

LATEST FROM THE EDGE

4 Intriguing Email Attacks Detected by AI in 2020

Here's to the sneakiest of the sneaky. These clever phishing messages -- that standard validation measures often missed -- deserve proper dishonor.

Tech Resources

ACCESS TECH LIBRARY NOW

How Elite Analyst Teams are Transforming Security with Cyber Reconnaissance
In this webinar, we will look at case studies from consumer banks and big retail to illustrate how these organizations are leveraging their analyst teams in more strategic ways to vastly improve their security postures. Learn how these organizations are ...
A Radical Approach to Threat Intel Management
What's the point of collecting tactical information that your team can't act on or map to what's happening in your environment? As a security leader, you need more from your cyber threat intelligence program.

MORE WEBINARS

FEATURED REPORTS

MORE REPORTS

CURRENT ISSUE

2020: The Year in Security
DOWNLOAD THIS ISSUE	SUBSCRIBE NOW
BACK ISSUES \| MUST READS \| TECH DIGEST

PRODUCTS & RELEASES

New Podcast Launches Focused on Security Start-up Entrepreneurs

Varonis Announces New Features to Combat Insider Threats and Collaboration Risks in Microsoft 365

Swimlane Raises $40M Growth Round to Deliver Hyper Automated Security Operations

MORE PRODUCTS & RELEASES

Dark Reading Daily
-- Published By Dark Reading
Informa Tech
303 Second St., Suite 900 South Tower, San Francisco, CA 94107

To update your profile, change your e-mail address, or unsubscribe, click here.

To opt-out of any future Dark Reading Daily Newsletter emails, please respond here.

Thoughts about this newsletter? Give us feedback.

Keep This Newsletter Out Of Your SPAM Folder
Don't let future editions go missing. Take a moment to add the newsletter's address to your anti-spam white list:

If you're not sure how to do that, ask your administrator or ISP. Or check your anti-spam utility's documentation.

We take your privacy very seriously. Please review our Privacy Statement.

2020: The Year in Security