White House Scales Back Response to SolarWinds & Exchange Server Attacks

[TechWeb]( Follow Dark Reading: [RSS]( April 20, 2021 LATEST SECURITY NEWS & COMMENTARY [White House Scales Back Response to SolarWinds & Exchange Server Attacks]( Lessons learned from the Unified Coordination Groups will be used to inform future response efforts, a government official says. [SolarWinds: A Catalyst for Change & a Cry for Collaboration]( Cybersecurity is more than technology or safeguards like zero trust; mostly, it's about collaboration. [(Sponsored Article) Why the Cloud-Agnostic Security Platform Is Today's Most Effective Multicloud Strategy]( To adopt the best multicloud capabilities, organizations should look for a unifying Cloud Native Security Platform to natively integrate multiple CSPs. [Attackers Test Weak Passwords in Purple Fox Malware Attacks]( Researchers share a list of passwords that Purple Fox attackers commonly brute force when targeting the SMB protocol. [Lazarus Group Uses New Tactic to Evade Detection]( Attackers conceal malicious code within a BMP file to slip past security tools designed to detect embedded objects within images. [MORE NEWS & COMMENTARY]( HOT TOPICS [Microsoft Uses Machine Learning to Predict Attackers' Next Steps]( Researchers build a model to attribute attacks to specific groups based on tactics, techniques, and procedures, and then figure out their next move. [Nation-State Attacks Force a New Paradigm: Patching as Incident Response]( IT no longer has the luxury of thoroughly testing critical vulnerability patches before rolling them out. [FBI Operation Remotely Removes Web Shells From Exchange Servers]( A court order authorized the FBI to remove malicious Web shells from hundreds of vulnerable machines running on-premises Exchange Server. [MORE]( EDITORS' CHOICE [Malicious PowerShell Use, Attacks on Office 365 Accounts Surged in Q4]( There was also a sharp increase in overall malware volumes in the fourth quarter of 2020, COVID-19 related attack activity, and mobile malware, new data shows. [7 Security Strategies as Employees Return to the Office]( More sooner than later, employees will be making their way back to the office. Here's how security pros can plan for the next new normal. LATEST FROM THE EDGE [How to Create an Incident Response Plan From the Ground Up]( Security 101: In the wake of an incident, it's important to cover all your bases -- and treat your IR plan as a constantly evolving work in progress. Tech Resources - [What Elite Threat Hunters See That Others Miss: Case Study]( - [How to Optimize Your Windows 10 Defense Strategy]( - [Top Threats to Cloud Computing: The Egregious 11]( - [SANS Institute Survey: The State of Cloud Security]( - [A New Take on Cloud Shared Responsibility]( - [Zero Trust Evaluation Guide]( - [2021 Application Security Statistics Report Vol.1]( [ACCESS TECH LIBRARY NOW]( - [Track Down The "Shadow IT" Lurking In Your Environment]( In this webinar, experts discuss methods and technologies for gaining a more complete picture of your IT environment, and for securing or eliminating unknown elements that attempt to use your network. - [Learn to Build an Accurate Inventory of Your Remote Endpoints]( In this webinar, experts discuss methods and technologies for gaining a more complete picture of your IT environment, and for securing or eliminating unknown elements that attempt to use your network. [MORE WEBINARS]( FEATURED REPORTS - [Improving Security by Moving Beyond VPN]( - [Accelerate Threat Resolutions with DNS]( [MORE REPORTS]( CURRENT ISSUE [2021 Top Enterprise IT Trends]( [DOWNLOAD THIS ISSUE]( [SUBSCRIBE NOW]( [BACK ISSUES]( | [MUST READS]( | [TECH DIGEST]( PRODUCTS & RELEASES [Kasada and GreyNoise Team up to Identify Which Potential Threats Demand Immediate Attention]( [Mastercard to Acquire Ekata to Advance Digital Identity Efforts]( [$125M Growth Round Fuels Keyfactor & PrimeKey Merger to Bring Machine Identity Management to the Mainstream]( [Cado Security Closes $10M in Funding to Accelerate Adoption of Cloud-Native Digital Forensics Platform]( [MORE PRODUCTS & RELEASES]( Dark Reading Daily -- Published By [Dark Reading]( Informa Tech 303 Second St., Suite 900 South Tower, San Francisco, CA 94107 To update your profile, change your e-mail address, or unsubscribe, [click here.]( To opt-out of any future Dark Reading Daily Newsletter emails, please respond [here.]( Thoughts about this newsletter? [Give us feedback.](mailto:customerservice_informationhub@techweb.com) Keep This Newsletter Out Of Your SPAM Folder Don't let future editions go missing. Take a moment to add the newsletter's address to your anti-spam white list: If you're not sure how to do that, ask your administrator or ISP. Or check your anti-spam utility's documentation. We take your privacy very seriously. Please review our [Privacy Statement.]( [© 2021]( | [Informa Tech]( | [Privacy Statement]( | [Terms & Conditions]( | [Contact Us](mailto:customerservice_informationhub@techweb.com)