A script used to upload sensitive reports-with access to credentials and datastores-likely sent information on hundreds, possibly thousands, of companies to attackers.

from Dark Reading: https://ift.tt/3tDj2ib
via IFTTT

Over the next 100 days, the DoE will work with electric utilities to improve visibility, detection, and response for industrial control systems.

from Dark Reading: https://ift.tt/2Q9SFlL
via IFTTT

For all the chaos the pandemic caused, it also sparked awareness of how important an identity-centric approach is to securing today’s organizations.

from Dark Reading: https://ift.tt/3x99gqr
via IFTTT

Beneath all those containers and IoT devices, there’s a rich patchwork of gear, protocols, and guidelines that have been holding it together since before you were born. Knowledge of those fundamentals is growing more valuable, not less.

from Dark Reading: https://ift.tt/3xb3Qv3
via IFTTT

In recent months, bug-bounty programs have shifted from mitigating risk to inadvertently creating new liabilities for customers and vendors.

from Dark Reading: https://ift.tt/3suDukd
via IFTTT

Lessons learned from the Unified Coordination Groups will be used to inform future response efforts, a government official says.

from Dark Reading: https://ift.tt/3dupHpk
via IFTTT

Researchers share a list of passwords that Purple Fox attackers commonly brute force when targeting the SMB protocol.

from Dark Reading: https://ift.tt/32te5wB
via IFTTT

Attackers conceal malicious code within a BMP file to slip past security tools designed to detect embedded objects within images.

from Dark Reading: https://ift.tt/3ebaYii
via IFTTT

Cybersecurity is more than technology or safeguards like zero trust; mostly, it’s about collaboration.

from Dark Reading: https://ift.tt/2QwNZWN
via IFTTT

Endpoint security has changed. Can your security plan keep up?

from Dark Reading: https://ift.tt/3drA51j
via IFTTT