Server Management Software Discovered Harboring Backdoor

[TechWeb](?elq_mid=79813&elq_cid=22844169&_mc=NL_DR_EDT_DR_daily_20170816&cid=NL_DR_EDT_DR_daily_20170816&elqTrackId=17026508c2cb43b7a82b606616aaccd4&elq=a6b395de58eb4a6f8c1eb705f8c2e87b&elqaid=79813&elqat=1&elqCampaignId=27637) Follow Dark Reading: [RSS]( August 16, 2017 Top!Top?elq_mid=79813&elq_cid=22844169 LATEST SECURITY NEWS & COMMENTARY [Server Management Software Discovered Harboring Backdoor]( ShadowPad backdoor found embedded in a software product used by major organizations around the globe to manage their Linux, Windows, and Unix servers. [BEC Attacks Don't Always Require Sophistication]( Simple business email compromise scams can con companies out of huge sums of money and don't require much hacking or even social engineering know-how. [IoT Medical Devices a Major Security Worry in Healthcare, Survey Shows]( Healthcare providers, manufacturers, and regulators say cybersecurity risks of IoT medical devices and connected legacy systems a top concern. [Cybersecurity: The Responsibility of Everyone]( The battle against cybercrime can only be won if we're all focused on the same goals. Here are four ways you can get involved. [20 Tactical Questions SMB Security Teams Should Ask Themselves]( Or why it pays for small- and medium-sized businesses to plan strategically but act tactically. [Webroot Acquires Security Training Platform]( Endpoint security company snaps up the assets of Securecast in a move to build out a training program to test users' ability to recognize a phishing attack. [MORE NEWS & COMMENTARY]( HOT TOPICS [Breaches Are Coming: What Game of Thrones Teaches about Cybersecurity]( Whether you're Lord Commander of the Night's Watch or the CISO of a mainstream business, it's not easy to defend against a constantly evolving threat that is as deadly as an army of White Walkers. [APT28 Uses EternalBlue to Spy on Hotel Wifi Networks]( Hacker group APT28 is using the EternalBlue hacking tool to spread throughout hotel networks and collect guests' information. [HBO Offers Hackers $250,000 as 'Show Of Good Faith' on $6 Million Ransom Request](250000-as-show-of-good-faith-on-$6-million-ransom-request-/d/d-id/1329625?elq_mid=79813&elq_cid=22844169&_mc=NL_DR_EDT_DR_daily_20170816&cid=NL_DR_EDT_DR_daily_20170816&elqTrackId=9355c594fd8b45fbb8e81d415a8ee6f5&elq=a6b395de58eb4a6f8c1eb705f8c2e87b&elqaid=79813&elqat=1&elqCampaignId=27637) The offer was reportedly designed to stall for time, with no plans to ever pay it. [MORE]( IN CASE YOU MISSED IT [9 of the Biggest Bug Bounty Programs]( These programs stand out for the size of their rewards and how much they have paid in total to security researchers in bounties over the last several years. Tech Resources - [2017 Webroot Threat Report]( - [The DomainTools Report: Spring 2017 Edition]( - [GDPR: What It Means & How SAS Data Mgmt Can Help]( - [[Best Practices] Office 365 Security Monitoring]( - [Network Intelligence at Tomorrow's Scale](s-scale/390263?elq_mid=79813&elq_cid=22844169&_mc=NL_DR_EDT_DR_daily_20170816&cid=NL_DR_EDT_DR_daily_20170816&elqTrackId=b5cda91ab97a477dbf8154c500651541&elq=a6b395de58eb4a6f8c1eb705f8c2e87b&elqaid=79813&elqat=1&elqCampaignId=27637) - [[Guide] Avoiding Financial Cybersecurity Losses]( - [Lower IT costs, improve security and compliance](-improve-security-and-compliance/391083?elq_mid=79813&elq_cid=22844169&_mc=NL_DR_EDT_DR_daily_20170816&cid=NL_DR_EDT_DR_daily_20170816&elqTrackId=526e66cf087d4693ad28ad0b8947611e&elq=a6b395de58eb4a6f8c1eb705f8c2e87b&elqaid=79813&elqat=1&elqCampaignId=27637) [ACCESS TECH LIBRARY NOW]( - [Threat Intelligence Overload?]( A wide range of threat intelligence feeds and services have cropped up keep IT organizations up to date on the latest security threats. But without mechanisms in place to actually use the information, these alerts provide little benefit. - [New Security Technologies: Advice & Best Practices on Selecting The Right One]( Given today's threat landscape, combined with so many security options available today, it can be daunting when selecting new or alternative technologies to protect your business. Your security team has unique challenges; therefore, you should be asking your next security ... [MORE WEBINARS]( Partner Perspectives [In Search of the Security Unicorn: Unified, Adaptive Defense]( How enterprises can get an edge over innovative cybercriminals by creating a cycle of continual security posture adjustment within their own organizations. [6 Ways CISOs Can Play a Role in Selling Security]( When customers ask tough questions about data security, business service resilience, privacy, regulatory, and reputational risk it's best to remain upbeat and positive. Here's how. [Fight 'Credential Stuffing' with a New Approach to Authorization]( Token-based authorization that lets users prove their identity through Facebook, Google, or Microsoft credentials can dramatically reduce your attack surface and give enterprises a single point of control. Middle!Middle?elq_mid=79813&elq_cid=22844169 FEATURED REPORTS - [[Security Breach Report] Overall Impact of & Steps to Prevent Breaches]( Despite the escalation of cybersecurity staffing and technology, enterprises continue to suffer data breaches and compromises at an alarming rate. How do these breaches occur? How are enterprises responding, and what is the impact of these compromises on the business? ... - [How to Invest in Cybersecurity & Prioritize Resources](strategic-security-report]-how-enterprises-are-attacking-the-cybersecurity-challenge/390403?elq_mid=79813&elq_cid=22844169&_mc=NL_DR_EDT_DR_daily_20170816&cid=NL_DR_EDT_DR_daily_20170816&elqTrackId=a22602f1ce754ad58111f9bb708f20d9&elq=a6b395de58eb4a6f8c1eb705f8c2e87b&elqaid=79813&elqat=1&elqCampaignId=27637) In 2016, enterprises encountered a range of new exploits and threats -- including ransomware and state-sponsored attacks -- and developed new plans of defense. How will these organizations be investing their cybersecurity budgets and staffing in the next 12 months? What tools ... [MORE REPORTS]( CURRENT ISSUE [Security Vulnerabilities: The Next Wave]( [DOWNLOAD THIS ISSUE]( [SUBSCRIBE NOW]( [BACK ISSUES]( | [MUST READS]( | [TECH DIGEST]( PRODUCTS & RELEASES [Alert Logic Releases 2017 Cloud Security Report]( [Darktrace Releases Version 3 of its AI Cyber Defense Solution]( [Hackers: Privileged Accounts Provide Fastest Access to Sensitive, Critical Data]( [MORE PRODUCTS & RELEASES]( Dark Reading Daily -- Published By [InformationWeek](?elq_mid=79813&elq_cid=22844169&_mc=NL_DR_EDT_DR_daily_20170816&cid=NL_DR_EDT_DR_daily_20170816&elqTrackId=f8b6c044be734d238b2983a5fd1a9288&elq=a6b395de58eb4a6f8c1eb705f8c2e87b&elqaid=79813&elqat=1&elqCampaignId=27637) UBM Tech 2 Penn Plaza, 15th Floor, New York, NY 10121 To update your profile, change your e-mail address, or unsubscribe, [cick here.]( To opt-out of any future Dark Reading Daily Newsletter emails, please respond [here.]( Thoughts about this newsletter? [Give us feedback.](mailto:email@techwebnewsletters.com) Keep This Newsletter Out Of Your SPAM Folder Don't let future editions go missing. Take a moment to add the newsletter's address to your anti-spam white list: If you're not sure how to do that, ask your administrator or ISP. Or check your anti-spam utility's documentation. We take your privacy very seriously. Please review our [Privacy Statement.]( [© 2017]( | [UBM Tech]( | [Privacy Statement]( | [Terms Of Service]( | [Contact Us](mailto:iwkbtnnewsletters@ubm.com)