TA505 Abusing Legit Remote Admin Tool in String of Attacks

[TechWeb]( Follow Dark Reading: [RSS]( April 25, 2019 Top!Top?elq_mid=90684&elq_cid=22844169 LATEST SECURITY NEWS & COMMENTARY [TA505 Abusing Legit Remote Admin Tool in String of Attacks]( Russian-speaking threat group has been targeting retailers and financial institutions in the US and abroad via a spear-phishing campaign. [5 Security Challenges to API Protection]( Today's application programming interfaces are no longer simple or front-facing, creating new risks for both security and DevOps. [Attackers Aren't Invincible & We Must Use That to Our Advantage]( The bad guys only seem infallible. Use their weaknesses to beat them. [Survey Shows a Security Conundrum]( A new report examines and quantifies the conflicts and challenges faced by business security leaders. [Two Charged with Economic Espionage, GE Trade Secret Theft]( A US national and Chinese national have been charged with conspiring to steal General Electric's trade secrets surrounding turbine technologies. [MORE NEWS & COMMENTARY]( HOT TOPICS [Russia Hacked Clinton's Computers Five Hours After Trump's Call]( Mueller report finds that in July 2016, after then-candidate Donald Trump publicly called for Russia to "find the 30,000 emails," Russian agents targeted Hillary Clinton's personal office with cyberattacks. [New Twist in the Stuxnet Story]( What a newly discovered missing link to Stuxnet and the now-revived Flame cyber espionage malware add to the narrative of the epic cyber-physical attack. [GoT Guide to Cybersecurity: Preparing for Battle During a Staffing Shortage]( Faced with an overwhelming adversary, Game of Thrones heroes Daenerys Targaryen and Jon Snow have a lot in common with today's beleaguered CISOs. [MORE]( EDITORS' CHOICE [7 Ways to Get the Most from Your IDS/IPS]( Intrusion detection and prevention is at the foundation of successful security in-depth. Securing the perimeter requires a solid understanding of these two critical components. [Will the US Adopt a National Privacy Law?]( Probably not before the 2020 election. But keep an eye on this Congress as legislators debate how to define personal data and what limits to place on how companies use it. Tech Resources - [A New World of IT Management in 2019]( - [The State of Mainframe Security]( - [Security in the New World of Containers & Serverless]( - [6 Keys to Faster Phishing Mitigation]( - [Why You Need Continuous Security Monitoring Platforms]( - [Security and Intelligence with Ribbon Protect]( - [Securing Real-Time Communications]( [ACCESS TECH LIBRARY NOW]( - [Secure Email: Developing the Right Strategy]( In this webinar, top experts discuss strategies for limiting access to critical email systems, when to encrypt email attachments and transmissions, and how to build a day-to-day process for protecting email against common cyber attacks. - [A Day in the Life of an OT Cybersecurity Expert]( Listen to three OT cybersecurity experts who will share their experience and lessons learned when securing the critical infrastructure. [MORE WEBINARS]( Partner Perspectives [An Industry In Transition: Key Tech Trends In 2018]( [Get Smart About Network Segmentation & Traffic Routing]( Through a combination of intelligent segmentation and traffic routing to tools, you can gain much better visibility into your network. Here's how. [Boosting Security Effectiveness with 'Adjuvants']( How integrating corporate resources like the IT help desk, system administration, quality assurance and HR can breathe new life into your security program. Middle!Middle?elq_mid=90684&elq_cid=22844169 FEATURED REPORTS - [How Enterprises Are Attacking the Cybersecurity Problem]( Online attackers are constantly developing new, innovative ways to break into the enterprise. This Dark Reading Tech Digest gives an in-depth look at five emerging attack trends and exploits your security team should look out for, along with helpful recommendations ... - [Cybersecurity Insider 2018 Threat Intelligence Report]( [MORE REPORTS]( CURRENT ISSUE [5 Emerging Cyber Threats to Watch for in 2019]( [DOWNLOAD THIS ISSUE]( [SUBSCRIBE NOW]( [BACK ISSUES]( | [MUST READS]( | [TECH DIGEST]( PRODUCTS & RELEASES [Indian National Extradited to United States to Face Charges for Leadership Role in Multimillion Dollar India-Based Call Center Scam Targeting U.S. Victims]( [Device as Online Passport; TransUnion's iovation Launches Updated Products]( [Fortinet Continues Commitment to Close the Cyber Skills Gap Through NSE Institute Program]( [MORE PRODUCTS & RELEASES]( Dark Reading Daily -- Published By [InformationWeek]( UBM Tech 2 Penn Plaza, 15th Floor, New York, NY 10121 To update your profile, change your e-mail address, or unsubscribe, [click here.]( To opt-out of any future Dark Reading Daily Newsletter emails, please respond [here.]( Thoughts about this newsletter? [Give us feedback.](mailto:email@techwebnewsletters.com) Keep This Newsletter Out Of Your SPAM Folder Don't let future editions go missing. Take a moment to add the newsletter's address to your anti-spam white list: If you're not sure how to do that, ask your administrator or ISP. Or check your anti-spam utility's documentation. We take your privacy very seriously. Please review our [Privacy Statement.]( [© 2019]( | [UBM Tech]( | [Privacy Statement]( | [Terms Of Service]( | [Contact Us](mailto:iwkbtnnewsletters@ubm.com)