Dark Reading Daily -- December 06, 2019

US Sets $5 Million Bounty For Russian Hacker Behind Zeus Banking Thefts

Maksim Yakubets and his crew stole tens of millions using Zeus and Dridex, with victims including Bank of America, Key Bank, GenLabs, and United Dairy, DoJ says.

SOC 2s & Third-Party Assessments: How to Prevent Them from Being Used in a Data Breach Lawsuit

Assessments can be used against your company in court proceedings. Here's how to mitigate this potential risk.

The Human Factor: 5 Reasons Why Cybersecurity Is a People Problem

The industry can only go so far in treating security as a challenge that can be resolved only by engineering.

VPN Flaw Allows Criminal Access to Everything on Victims' Computers

Vulnerability in the Aviatrix VPN client, since patched, gives an attacker unlimited access to a breached system.

Microsoft Defender ATP Brings EDR Capabilities to macOS

Mac computers will now have the option to use Microsoft Defender Advanced Threat Protection's endpoint and detection response.

With Aporeto, Palo Alto Looks Away from the Firewall and Toward the Future

Seeing its firewall sales softening, the security vendor makes another acquisition to reorient itself for the cloud era.

3 Modern Myths of Threat Intelligence

More intelligence does not lead to more security. Here's why.

StrandHogg Vulnerability Affects All Versions of Android

The bug enables malware to pose as any legitimate Android app, letting attackers track messages, photos, credentials, and phone conversations.

Attackers Continue to Exploit Outlook Home Page Flaw

FireEye issues guidance on locking down Outlook, claiming that security researchers, at least, are able to work around the patch issued by Microsoft.

EDITORS' CHOICE

Cybersecurity Team Holiday Guide: 2019 Gag Gift Edition

Make your favorite security experts laugh with these affordable holiday gifts.

Navigating Security in the Cloud

Underestimating the security changes that need to accompany a shift to the cloud could be fatal to a business. Here's why.

NEW FROM THE EDGE

10 Security 'Chestnuts' We Should Roast Over the Open Fire

These outdated security rules we all know (and maybe live by) no longer apply.

Navigating the Deluge of Security Data