Pulse Secure VPN Flaws Exploited to Target US Defense Sector

[TechWeb]( Follow Dark Reading: [RSS]( April 21, 2021 LATEST SECURITY NEWS & COMMENTARY [Pulse Secure VPN Flaws Exploited to Target US Defense Sector]( China-linked attackers have used vulnerabilities in the Pulse Secure VPN appliance to attack US Defense Industrial Base networks. [Attackers Compromised Code-Checking Vendor's Tool for Two Months]( A script used to upload sensitive reports-with access to credentials and datastores-likely sent information on hundreds, possibly thousands, of companies to attackers. [2020 Changed Identity Forever; What's Next?]( For all the chaos the pandemic caused, it also sparked awareness of how important an identity-centric approach is to securing today's organizations. [Beware the Bug Bounty]( In recent months, bug-bounty programs have shifted from mitigating risk to inadvertently creating new liabilities for customers and vendors. [Foreign Spies Target British Nationals With Fake Social Media Profiles]( British security agency MI5 has launched a new education campaign to warn potential victims of the attacks. [Dept. of Energy Launches Plan to Protect Electric Grid from Cyberattack]( Over the next 100 days, the DoE will work with electric utilities to improve visibility, detection, and response for industrial control systems. [MORE NEWS & COMMENTARY]( HOT TOPICS [New Malware Downloader Spotted in Targeted Campaigns]( Saint Bot is being used to drop stealers on compromised systems but could be used to deliver any malware. [How to Create an Incident Response Plan From the Ground Up]( Security 101: In the wake of an incident, it's important to cover all your bases -- and treat your IR plan as a constantly evolving work in progress. [Clear & Present Danger: Data Hoarding Undermines Better Security]( Facebook and Google can identify patterns of attack within their own data, but smaller businesses rarely see enough traffic to successfully identify an attack or warn users. [MORE]( EDITORS' CHOICE [8 Security & Privacy Apps to Share With Family and Friends]( Mobile apps to recommend to the people in your life who want to improve their online security and privacy. [SolarWinds: A Catalyst for Change & a Cry for Collaboration]( Cybersecurity is more than technology or safeguards like zero trust; mostly, it's about collaboration. LATEST FROM THE EDGE [7 Old IT Things Every New InfoSec Pro Should Know]( Beneath all those containers and IoT devices, there's a rich patchwork of gear, protocols, and guidelines that have been holding it together since before you were born. Knowledge of those fundamentals is growing more valuable, not less. Tech Resources - [What Elite Threat Hunters See That Others Miss: Case Study]( - [How to Optimize Your Windows 10 Defense Strategy]( - [Top Threats to Cloud Computing: The Egregious 11]( - [A New Take on Cloud Shared Responsibility]( - [Gartner: Hype Cycle for Security Operations]( - [Simplify Your Application Security]( - [Smart Service Management: Working Better Together with a Connected Enterprise]( [ACCESS TECH LIBRARY NOW]( - [Keys to Better Cyber Risk Assessment]( At this Dark Reading webinar, learn about the costs associated with today's threats and data breaches, how to measure current threats, and how to quantify the risks to your organization, so that you can implement the tools and processes to ... - [Building Asset Management into Your Enterprise Security Strategy]( In this webinar, experts discuss methods and technologies for gaining a more complete picture of your IT environment, and for securing or eliminating unknown elements that attempt to use your network. Attend this webinar and you'll: --Learn what tools can ... [MORE WEBINARS]( FEATURED REPORTS - [Improving Security by Moving Beyond VPN]( - [Accelerate Threat Resolutions with DNS]( [MORE REPORTS]( CURRENT ISSUE [2021 Top Enterprise IT Trends]( [DOWNLOAD THIS ISSUE]( [SUBSCRIBE NOW]( [BACK ISSUES]( | [MUST READS]( | [TECH DIGEST]( PRODUCTS & RELEASES [Sift Streamlines Digital Trust & Safety Suite to Protect Merchants Against the Fraud Economy]( [MITRE Engenuity Announces Results from Evaluating Enterprise Security Products Against Cybercrime Threats]( [Zerto Announces Zerto Backup for SaaS, Powered by Keepit]( [Zerto Announces General Availability of Zerto for Kubernetes and New Public Cloud Capabilities]( [MORE PRODUCTS & RELEASES]( Dark Reading Daily -- Published By [Dark Reading]( Informa Tech 303 Second St., Suite 900 South Tower, San Francisco, CA 94107 To update your profile, change your e-mail address, or unsubscribe, [click here.]( To opt-out of any future Dark Reading Daily Newsletter emails, please respond [here.]( Thoughts about this newsletter? [Give us feedback.](mailto:customerservice_informationhub@techweb.com) Keep This Newsletter Out Of Your SPAM Folder Don't let future editions go missing. Take a moment to add the newsletter's address to your anti-spam white list: If you're not sure how to do that, ask your administrator or ISP. Or check your anti-spam utility's documentation. We take your privacy very seriously. Please review our [Privacy Statement.]( [© 2021]( | [Informa Tech]( | [Privacy Statement]( | [Terms & Conditions]( | [Contact Us](mailto:customerservice_informationhub@techweb.com)