Dark Reading

1. FragAttacks Foil 2 Decades of Wireless Security

   Wireless security protocols have improved, but product vendors continue to make implementation errors that allow a variety of attacks.

2. Researchers Call for 'CVE' Approach for Cloud Vulnerabilities

   New research suggests isolation among cloud customer accounts may not be a given -- and the researchers behind the findings issue a call to action for cloud security.

3. HTTP/2 Implementation Errors Exposing Websites to Serious Risks

   Organizations that don't implement end-to-end HTTP/2 are vulnerable to attacks that redirect users to malicious sites and other threats, security researcher reveals at Black Hat USA.

4. CISA Launches JCDC, the Joint Cyber Defense Collaborative

   "We can't do this alone," the new CISA director told attendees in a keynote at Black Hat USA today.

5. Incident Responders Explore Microsoft 365 Attacks in the Wild

   Mandiant experts discuss the novel techniques used to evade detection, automate data theft, and achieve persistent access.

6. Researchers Find Significant Vulnerabilities in macOS Privacy Protections

   Attacks require executing code on a system but foil Apple's approach to protecting private data and systems files.

7. A New Approach to Securing Authentication Systems' Core Secrets

   Researchers at Black Hat USA explain issues around defending "Golden Secrets" and present an approach to solving the problem.

8. Organizations Still Struggle to Hire & Retain Infosec Employees: Report

   Security leaders are challenged to fill application security and cloud computing jobs in particular, survey data shows.

9. Why Supply Chain Attacks Are Destined to Escalate

   In his keynote address at Black Hat USA on Wednesday, Matt Tait, chief operating officer at Corellium, called for software platform vendors and security researchers to do their part to thwart the fallout of software supply chain compromises.

10. New Normal Demands New Security Leadership Structure

    At the inaugural Omdia Analyst Summit, experts discuss where the past year has created gaps in traditional security strategy and how organizations can fill them.