darkreading
Dark Reading

Dark Reading: Connecting the Information and Security Community

Public Key

npub1l8jja0522xuslk4vcu67sgkkac6cmyw66sr8druq4ajxkly967tsgw3gsu

NIP-05 Address

npub1l8jja0522xuslk4vcu67sgkkac6cmyw66sr8druq4ajxkly967tsgw3gsu@nost.vip

Profile Code

nprofile1qqs0nefwh699rwg0m2kvwd0gyttwudvdj8ddgpnk37q27ert0jza09cv4nqg9

Author Public Key

npub1l8jja0522xuslk4vcu67sgkkac6cmyw66sr8druq4ajxkly967tsgw3gsu

Show more details

Last Notes

2024-05-17 12:01:48

Microsoft Has Yet to Patch 7 Pwn2Own Zero-Days
A number of serious Windows bugs still haven't made their way into criminal circles, but that won't remain the case forever — and time is running short before ZDI releases exploit details.
https://www.darkreading.com/vulnerabilities-threats/microsoft-has-yet-to-patch-7-pwn2own-zero-days

2024-05-10 22:50:35

Millions of IoT Devices at Risk from Flaws in Integrated Cellular Modem
Researchers discovered seven vulnerabilities — including an unauthenticated RCE issue — in widely deployed Telit Cinterion modems.
https://www.darkreading.com/ics-ot-security/millions-of-iot-devices-at-risk-from-flaws-in-integrated-cellular-modem

2024-05-10 15:50:50

Dark Reading 'Drops' Its First Podcast
Our brand-new podcast, Dark Reading Confidential, has officially launched. You don't want to miss our first episode with the CISO and chief legal officer from Reddit and a cybersecurity attorney, who ...
https://www.darkreading.com/cyber-risk/dark-reading-drops-its-first-podcast

2024-05-02 10:26:07

Microsoft Graph API Emerges as a Top Attacker Tool to Plot Data Theft
Weaponizing Microsoft's own services for command-and-control is simple and costless, and it helps attackers better avoid detection.
https://www.darkreading.com/cloud-security/microsoft-graph-api-emerges-as-top-attacker-tool-to-plot-data-theft

2024-03-15 21:26:04

'GhostRace' Speculative Execution Attack Impacts All CPU, OS Vendors
Like Spectre, the new GhostRace exploit could give attackers a way to access sensitive information from system memory and take other malicious actions.
https://www.darkreading.com/cyber-risk/ghostrace-speculative-execution-attack-cpu-os-vendors

2024-03-15 20:51:15

NHS Breach, HSE Bug Expose Healthcare Data in the British Isles
Whoopsies in Ireland and Scotland speak to a tenuousness of cyber protections for sensitive private healthcare data.
https://www.darkreading.com/cyberattacks-data-breaches/nhs-breach-hse-bug-expose-healthcare-data-british-isles

2024-03-15 16:50:51

6 CISO Takeaways From the NSA's Zero-Trust Guidance
All companies — not just federal agencies — should aim to adopt the "network and environment" pillar of the National Security Agency's zero-trust guidelines.
https://www.darkreading.com/cybersecurity-operations/6-ciso-takeaways-nsa-zero-trust-guidance

2024-03-14 21:51:05

Expel Releases Updated Toolkit in Response to NIST 2.0
https://www.darkreading.com/vulnerabilities-threats/expel-releases-updated-toolkit-in-response-to-nist-2-0

2024-03-14 21:50:53

Red Canary Announces Full Coverage of All Major Cloud Providers
https://www.darkreading.com/cloud-security/red-canary-announces-full-coverage-of-all-major-cloud-providers

2024-03-14 21:25:15

Nozomi Networks Secures $100M Investment to Defend Critical Infrastructure
https://www.darkreading.com/ics-ot-security/nozomi-networks-secures-100-million-investment-to-defend-critical-infrastructure

2024-03-14 20:50:50

Fortinet Warns of Yet Another Critical RCE Flaw
CVE-2024-48788, like many other recent Fortinet flaws, will likely be an attractive target, especially for nation-state backed actors.
https://www.darkreading.com/vulnerabilities-threats/fortinet-warns-of-yet-another-critical-rce-flaw

2024-03-14 20:50:37

FCC Approves Voluntary Cyber Trust Labels for Consumer IoT Products
Here's what IoT device manufacturers need to know to earn a cybersecurity stamp of approval from the government.
https://www.darkreading.com/ics-ot-security/fcc-approves-voluntary-cyber-trust-labels-iot-products

2024-03-14 20:00:13

Alabama Under DDoS Cyberattack by Russian-Backed Hacktivists
The hacktivist group Anonymous Sudan claims credit for a cyberattack that disrupted Alabama state government earlier this week.
https://www.darkreading.com/cyberattacks-data-breaches/alabama-targeted-by-russian-backed-ddos-cyberattack

2024-03-14 15:51:21

Malawi Passport System Back Online After Debilitating Cyberattack
Passport printing and distribution will resume first in Lilongwe as the immigration system gets back on its feet.
https://www.darkreading.com/cyberattacks-data-breaches/malawi-passport-system-back-online-after-cyberattack

2024-03-14 14:26:18

How to Identify a Cyber Adversary: What to Look For
There are many factors involved in attributing a cyber incident to a specific threat actor.
https://www.darkreading.com/cyberattacks-data-breaches/how-to-identify-cyber-adversary-what-to-look-for

2024-03-14 14:26:05

Windows SmartScreen Bypass Flaw Exploited to Drop DarkGate RAT
Attackers use Google redirects in their phishing attack leveraging a now-patched vulnerability that spreads the multifaceted malware.
https://www.darkreading.com/endpoint-security/windows-smartscreen-bypass-flaw-exploited-to-drop-darkgate-rat

2024-03-14 12:54:28

10 Tips for Better Security Data Management
CISOs must build out their security data management and security data architecture to get the most out of their security data for the least amount of investment.
https://www.darkreading.com/cybersecurity-analytics/10-tips-for-better-security-data-management

2024-03-14 05:00:39

150K+ UAE Network Devices & Apps Found Exposed Online
Misconfigurations, insecure services leave United Arab Emirates organizations and critical infrastructure vulnerable to bevy of cyber threats.
https://www.darkreading.com/threat-intelligence/150kplus-uae-network-devices-apps-exposed-online

2024-03-13 23:26:34

Codezero Raises $3.5M Seed Funding From Ballistic Ventures to Secure Multicloud Application Development
https://www.darkreading.com/cloud-security/codezero-raises-3-5m-seed-funding-from-ballistic-ventures-to-secure-multicloud-application-development

2024-03-13 23:26:21

Claroty Team82: 63% of Known Exploited Vulnerabilities Tracked by CISA Are on Healthcare Organization Networks
https://www.darkreading.com/ics-ot-security/claroty-team-82-63-of-known-exploited-vulnerabilities-tracked-by-cisa-are-on-healthcare-organization-networks

2024-03-13 23:00:27

Claroty Launches Advanced Anomaly Threat Detection for Medigate
https://www.darkreading.com/ics-ot-security/claroty-launches-advanced-anomaly-threat-detection-for-medigate

2024-03-13 22:26:30

ChatGPT Spills Secrets in Novel PoC Attack
Research is latest in a growing body of work to highlight troubling weaknesses in widely used generative AI tools.
https://www.darkreading.com/cyber-risk/researchers-develop-new-attack-for-extracting-secrets-from-chatgpt-other-genai-tools

2024-03-13 21:00:25

Yacht Retailer MarineMax Files 'Cyber Incident' with SEC
The Florida-based boat purveyor's operations were seemingly minimally disrupted and "not material," but it's filing an SEC notice anyway.
https://www.darkreading.com/cyberattacks-data-breaches/yacht-retailer-marinemax-files-cyber-incident-sec

2024-03-13 20:00:14

Heated Seats? Advanced Telematics? Software-Defined Cars Drive Risk
Car-makers are offering all kinds of over-the-air subscriptions and features, many of which benefit the businesses that use them. But it also opens up a wider attack surface for vehicle attackers.
https://www.darkreading.com/ics-ot-security/heated-seats-advanced-telematics-software-defined-cars-drive-risk

2024-03-13 19:51:47

Nissan Oceania Breached; 100K People Affected Down Under
A possible ransomware attack has exposed government and personal data of Australians and New Zealanders, encompassing the carmaker's customers, dealers, and employees.
https://www.darkreading.com/cyberattacks-data-breaches/nissan-oceania-breached-100k-customers-employees-dealers-affected

2024-03-13 18:51:06

2024-03-13 17:27:57

Patch Now: Kubernetes RCE Flaw Allows Full Takeover of Windows Nodes
Attackers can remotely execute code with system privileges by exploiting a vulnerability in the source code of the open source container management system.
https://www.darkreading.com/cloud-security/patch-now-kubernetes-flaw-allows-for-full-takeover-of-windows-nodes

2024-03-13 14:26:23

Why You Need to Know Your AI's Ancestry
Securing AI can't wait an hour, let alone a decade.
https://www.darkreading.com/vulnerabilities-threats/why-you-need-to-know-your-ai-ancestry

2024-03-13 12:02:23

Critical ChatGPT Plugin Vulnerabilities Expose Sensitive Data
The vulnerabilities found in ChatGPT plugins — since remediated — heighten the risk of proprietary information being stolen and the threat of account takeover attacks.
https://www.darkreading.com/vulnerabilities-threats/critical-chatgpt-plugin-vulnerabilities-expose-sensitive-data

2024-03-13 07:01:43

Israeli Universities Hit by Supply Chain Cyberattack Campaign
Iranian hacktivist group known as Lord Nemesis and Nemesis Kitten targeted an academic sector software firm in Israel to gain access to its customers.
https://www.darkreading.com/cyberattacks-data-breaches/israeli-universities-hit-by-supply-chain-cyberattack-campaign

2024-03-12 22:25:49

GAO: CISA's OT Teams Inadequately Staffed
The response teams have a staging shortage, leaving them ill-prepared to take on significant threats from different places at once.
https://www.darkreading.com/ics-ot-security/cisa-ot-teams-are-inadequately-staffed-reports-gao

2024-03-12 20:26:15

'Magnet Goblin' Exploits Ivanti 1-Day Bug in Mere Hours
A prolific but previously hidden threat actor turns public vulnerabilities into working exploits before companies have time to patch.
https://www.darkreading.com/threat-intelligence/magnet-goblin-exploits-ivanti-1-day-bug-mere-hours

2024-03-12 14:50:26

Cyberattack Targets Regulator Database in South Africa
The Companies and Intellectual Property Commission (CIPC), which handles registration of businesses and intellectual property rights for the nation, called the breach "isolated."
https://www.darkreading.com/cyberattacks-data-breaches/cyberattack-targets-south-african-regulator-database

2024-03-12 14:25:52

How to Identify a Cyber Adversary: Standards of Proof
Identifying the who, what, and how behind a cyberattack is crucial for preventing future strikes.
https://www.darkreading.com/cyberattacks-data-breaches/how-to-identify-cyber-adversary-standards-of-proof

2024-03-12 12:53:38

To Spot Attacks Through AI Models, Companies Need Visibility
Rushing to onboard AI, companies and their developers are downloading a variety of pre-trained machine-learning models, but verifying security and integrity remains a challenge.
https://www.darkreading.com/cyber-risk/ai-models-take-off-leaving-security-behind

2024-03-12 10:27:18

Google's Gemini AI Vulnerable to Content Manipulation
Like ChatGPT and other GenAI tools, Gemini is susceptible to attacks that can cause it to divulge system prompts, reveal sensitive information, and execute potentially malicious actions.
https://www.darkreading.com/cyber-risk/google-gemini-vulnerable-to-content-manipulation-researchers-say

2024-02-15 13:26:21

10 Security Metrics Categories CISOs Should Present to the Board
Boards of directors don't care about the minute technical details of the security program. They want to see how key performance indicators are tracked and utilized.
https://www.darkreading.com/cybersecurity-analytics/10-security-metrics-categories-cisos-should-present-to-the-board

2024-01-26 21:00:36

Newly ID'ed Chinese APT Hides Backdoor in Software Updates
The threat actor went more than half a decade before being discovered — thanks to a remarkable backdoor delivered in invisible adversary-in-the-middle attacks.
https://www.darkreading.com/application-security/chinese-apt-hides-backdoor-in-software-updates

2024-01-25 22:25:50

Airline Gets SASE to Modernize Operations
Cathay, a travel lifestyle brand that includes the Cathay Pacific airline, had a growing cybersecurity problem made worse by its aging technology infrastructure. It solved part of the problem by repla...
https://www.darkreading.com/cloud-security/airline-experiments-with-sase-to-improve-overall-security

2024-01-23 20:00:28

SEC Says SIM Swap to Blame for Breached X Account
Crypto hackers gained control of a phone number associated with the government agency's account after MFA was disabled in July.
https://www.darkreading.com/endpoint-security/sec-sim-swap-to-blame-breached-x-account

2024-01-10 16:50:23

Pikabot Malware Surfaces As Qakbot Replacement for Black Basta Attacks
An emerging threat actor, Water Curupira, is wielding a new, sophisticated loader in a series of thread-jacking phishing campaigns that precede ransomware.
https://www.darkreading.com/cyberattacks-data-breaches/pikabot-malware-qakbot-replacement-black-basta-attacks

2024-01-02 22:50:28

Cybercriminals Share Millions of Stolen Records During Holiday Break
The "Leaksmus" event on the Dark Web exposed some 50 million records containing sensitive information from people all around the world.
https://www.darkreading.com/cyberattacks-data-breaches/cybercriminals-freely-share-millions-of-stolen-records-over-holiday-break

2023-12-18 20:50:55

Will Putting a Dollar Value on Vulnerabilities Help Prioritize Them?
Zoom's Vulnerability Impact Scoring System calculates the impact of a vulnerability to assign a cash payout for bugs, leading hackers to prioritize more severe flaws. Can it do the same for companies?
https://www.darkreading.com/application-security/putting-dollar-value-vulnerabilities-prioritize

2023-12-12 20:50:54

Debate Roils Over Extent of Nation-State Cyber Involvement in Gaza
Are hacktivists under the control of nation-states, or are they just independent contractors acting on their behalf?
https://www.darkreading.com/cyberattacks-data-breaches/gaza-conflict-enters-third-month-how-involved-are-nation-state-attackers

2023-12-12 14:51:35

Ex-Uber CISO Advocates 'Personal Incident Response Plan' for Security Execs
Why Joe Sullivan feels paying off attackers was a way of solving the problem.
https://www.darkreading.com/cyberattacks-data-breaches/ex-uber-cso-lessons-learned-from-the-breach-and-legal-case

2023-12-07 22:50:36

Medical Imaging Patients Exposed in Cyber Incident
Unauthorized actors accessed patient information, including exam and procedure details, scans, and Social Security numbers.
https://www.darkreading.com/cyberattacks-data-breaches/healthcare-facility-informs-patients-of-cyber-incident

2023-12-07 22:26:38

Russia's 'Star Blizzard' APT Upgrades its Stealth, Only to Be Unmasked Again
A state-sponsored Scooby Doo villain has once again been thwarted by those meddling researchers.
https://www.darkreading.com/threat-intelligence/russia-star-blizzard-apt-upgrades-stealth-unmasked

2023-12-06 23:27:15

DTEX Systems Appoints Mandiant Global CTO Marshall Heilman As CEO
https://www.darkreading.com/cybersecurity-careers/dtex-systems-appoints-mandiant-global-cto-marshall-heilman-as-ceo

2023-12-04 21:50:41

Meta AI Models Cracked Open With Exposed API Tokens
Researchers at Lasso found 1,500+ tokens in total that gave them varying levels of access to LLM repositories at Google, Microsoft, VMware, and some 720 other organizations.
https://www.darkreading.com/vulnerabilities-threats/meta-ai-models-cracked-open-exposed-api-tokens

2023-12-04 21:50:29

'AeroBlade' Group Hacks US Aerospace Company
Aeroblade flew under the radar, slicing through detection checks on a quest to steal sensitive commercial data.
https://www.darkreading.com/cyberattacks-data-breaches/aeroblade-cyberthreat-hacks-us-aerospace-company

2023-12-01 22:51:12

The Latest Delinea Secret Server Release Boosts Usability With New Features
https://www.darkreading.com/endpoint-security/the-latest-delinea-secret-server-release-boosts-usability-with-new-features

2023-11-27 21:51:03

Ardent Health Hospitals Disrupted After Ransomware Attack
More than two dozen hospitals have been impacted by the breach and are diverting emergency care for patients to other healthcare facilities.
https://www.darkreading.com/attacks-breaches/ardent-health-hospitals-disrupted-after-ransomware-attack

2023-11-27 21:25:59

General Electric, DARPA Hack Claims Raise National Security Concerns
Weapons systems data, AI research, and other classified information may be up for sale, not to mention access to other government agencies.
https://www.darkreading.com/attacks-breaches/general-electric-darpa-hack-claims-raise-national-security-concerns

2023-11-21 14:52:02

AI Helps Uncover Russian State-Sponsored Disinformation in Hungary
Researchers used machine learning to analyze Hungarian media reports and found Russian narratives soured the nation's perspective on EU sanctions and arms deliveries months before the Ukraine invasion...
https://www.darkreading.com/edge/ai-helps-uncover-russian-state-sponsored-disinformation-in-hungary

2023-11-17 08:26:51

Cybersecurity Investment Involves More Than Just Technology
Cybersecurity investment involves more than just buying security technologies — organizations are also looking at threat intelligence, risk assessment, cyber-insurance, and third-party risk management...
https://www.darkreading.com/tech-trends/cybersecurity-investment-more-than-technology

2023-10-21 00:25:36

9 Innovative Ways to Boost Security Hygiene for Cyber Awareness Month
If we really want to move the dial on security habits, it's time to think beyond phishing tests. Our panel of CISOs and other security heavy-hitters offer expert tips that go beyond the obvious.
https://www.darkreading.com/edge/9-innovative-ways-boost-security-hygiene-cybersecurity-awareness-month

2023-10-20 21:26:14

From Snooze to Enthuse: Security Awareness Training That Sticks
Most companies offer some kind of awareness training these days. But how much of those lessons are employees actually retaining?
https://www.darkreading.com/edge/from-snooze-to-enthuse-security-awareness-training-that-sticks

2023-10-20 20:51:14

Cisco Finds New Zero Day Bug, Pledges Patches in Days
A patch for the max severity zero-day bug tracked as CVE-2023-20198 is coming soon, but the bug has already led to the compromise of tens of thousands of Cisco devices. And now, there's a new unpatche...
https://www.darkreading.com/application-security/cisco-zero-day-bug-patches-in-days

2023-10-20 20:51:04

Critical SolarWinds RCE Bugs Enable Unauthorized Network Takeover
SolarWinds' access controls contain five high and three critical-severity security vulnerabilities that need to be patched yesterday.
https://www.darkreading.com/vulnerabilities-threats/critical-solarwinds-rce-bugs-enable-unauthorized-network-takeover

2023-10-03 14:00:32

Ransomware Crisis, Recession Fears Leave CISOs in Tough Spot
Combining robust decryption and orchestration of encrypted traffic with threat prevention is crucial to staying ahead of attackers.
https://www.darkreading.com/vulnerabilities-threats/ransomware-crisis-recession-fears-leave-cisos-in-tough-spot

2023-10-03 12:00:19

In Search of Rust Developers, Companies Turn to In-House Training
Google, Fortanix, and other firms have aimed to train a cadre of Rust developers, betting that the additional cost will be offset by security savings.
https://www.darkreading.com/edge/seeking-rust-developers-in-house-training

2023-10-02 22:25:22

Secure Yeti Appoints Jayson E. Street as Chief Adversarial Officer to Spearhead Cybersecurity Empowerment
https://www.darkreading.com/operations/secure-yeti-appoints-jayson-e-street-as-chief-adversarial-officer-to-spearhead-cybersecurity-empowerment-

2023-10-02 21:50:48

Visa Program Combats Friendly Fraud Losses For Small Businesses Globally
https://www.darkreading.com/attacks-breaches/visa-program-combats-friendly-fraud-losses-for-small-businesses-globally

2023-10-02 21:00:41

North Korea Poses as Meta to Deploy Complex Backdoor at Aerospace Org
The Lazarus Group's "LightlessCan" malware executes multiple native Windows commands within the RAT itself, making detection significantly harder, security vendor says.
https://www.darkreading.com/cloud/north-korea-meta-complex-backdoor-aerospace

2023-09-27 22:25:52

Netscout Identified Nearly 7.9M DDOS Attacks in the First Half of 2023
https://www.darkreading.com/attacks-breaches/netscout-identified-nearly-7-9m-ddos-attacks-in-the-first-half-of-2023

2023-09-27 22:25:44

Fortinet Announces Formation of Veterans Program Advisory Council to Narrow the Cybersecurity Skills Gap With Military Veteran Talent
https://www.darkreading.com/operations/fortinet-announces-formation-of-veterans-program-advisory-council-to-narrow-the-cybersecurity-skills-gap-with-military-veteran-talent

2023-09-27 22:25:35

Radiant Logic Announces Expanded Identity Analytics and Data Management Platform Capabilities
https://www.darkreading.com/remote-workforce/radiant-logic-announces-expanded-identity-analytics-and-data-management-platform-capabilities-

2023-09-27 19:00:13

Microsoft Adds Passkeys to Windows 11
It's the latest step in the gradual shift away from traditional passwords.
https://www.darkreading.com/application-security/microsoft-adds-passkeys-to-windows-11

2023-09-27 14:50:46

Hackers Trick Outlook into Showing Fake AV Scans
Researchers spot attackers using an existing phishing obfuscation tactic in order to better ensure recipients fall for their scam.
https://www.darkreading.com/endpoint/hackers-abuse-zerofont-phishing-tactic-to-trick-outlook-into-showing-fake-av-scans

2023-09-22 16:25:53

MGM, Caesars Cyberattack Responses Required Brutal Choices
Tens of millions in losses later, the MGM and Caesars systems are back online following dual cyberattacks by the same threat actor — here's what experts say about their incident responses.
https://www.darkreading.com/application-security/mgm-caesars-incident-responses-required-brutal-choices

2023-09-22 14:00:34

Guardians of the Cyberverse: Building a Resilient Security Culture
Whether achieved through AI-enabled automation, proactive identification and resolution of issues, or the equitable distribution of risk management responsibilities, the goal must be resilience.
https://www.darkreading.com/vulnerabilities-threats/guardians-of-the-cyberverse-building-a-resilient-security-culture

2023-09-21 22:25:12

Mysterious 'Sandman' APT Targets Telecom Sector With Novel Backdoor
The Sandman group's main malware is among the very few that use the Lua scripting language and its just-in-time compiler.
https://www.darkreading.com/attacks-breaches/mysterious-sandman-apt-targets-telecom-sector-with-novel-backdoor

2023-09-21 17:01:17

Mastering Defense-In-Depth and Data Security in the Cloud Era
Though widely used in many organizations, the concept still requires adaptation when aimed at protecting against new types of attacks.
https://www.darkreading.com/cloud/mastering-defense-in-depth-and-data-security-in-the-cloud-era

2023-09-20 15:26:03

How to Interpret the 2023 MITRE ATT&CK Evaluation Results
Unpack MITRE's methodology, understand the results, and learn top takeaways from Cynet's evaluation of MITRE's annual security vendor tests.
https://www.darkreading.com/endpoint/how-to-interpret-the-2023-mitre-att-ck-evaluation-results

2023-09-20 13:50:52

Pro-Iranian Attackers Target Israeli Railroad Network
The group known as "Cyber Avengers" has targeted other Israeli services in the past and often publishes technical details of its hits.
https://www.darkreading.com/dr-global/pro-iranian-attackers-target-israeli-railroad-network

2023-09-19 19:26:14

MGM, Caesars Face Regulatory, Legal Maze After Cyber Incidents
MGM and Caesars are putting new SEC incident disclosure regulations to a real-world test in the aftermath of twin cyberattacks on the casinos, as class-action lawsuits loom.
https://www.darkreading.com/attacks-breaches/mgm-caesars-regulatory-legal-maze-cyber-incidents

2023-09-18 17:00:37

How to Get Your Board on Board With Cybersecurity
CISOs can refine their soft skills to help get their cybersecurity best-practices message across. Steps include increasing staff incident-response training and staying current with the threat landscap...
https://www.darkreading.com/vulnerabilities-threats/how-to-get-your-board-on-board-with-cybersecurity

2023-09-18 15:50:31

A Playbook for Bridging Africa's Cybersecurity Skills Shortage
A pledge to solve the skills and talent shortage by the US government has seen one Nigerian company join the effort and aid Africa.
https://www.darkreading.com/dr-global/playbook-for-bridging-africas-cybersecurity-skills-shortage

2023-09-18 07:00:37

AI in Software Development: The Good, the Bad, and the Dangerous
Just like with using open source, organizations need to be diligent about testing AI components and understanding where and how it is used in their software.
https://www.darkreading.com/application-security/ai-in-software-development-the-good-the-bad-and-the-dangerous

2023-09-18 07:00:30

Evaluating New Partners and Vendors From an Identity Security Perspective
Before working with new vendors, it's important to understand the potential risks they may pose to your digital environments.
https://www.darkreading.com/risk/evaluating-new-partners-and-vendors-from-an-identity-security-perspective

2023-09-15 21:50:54

Microsoft Flushes Out 'Ncurses' Gremlins
The maintainers of the widely used library recently patched multiple memory corruption vulnerabilities that attackers could have abused to, ahem, curse targets with malicious code and escalate privile...
https://www.darkreading.com/application-security/microsoft-flushes-out-ncurses-gremlins

2023-09-15 21:50:44

DoD: China's ICS Cyber Onslaught Aimed at Gaining Kinetic Warfare Advantage
Escalating incursions into military base infrastructure, telecom networks, utilities, and more signal that Beijing is laying the groundwork for mass disruption.
https://www.darkreading.com/threat-intelligence/dod-china-ics-cyber-onslaught-kinetic-warfare-advantage

2023-09-15 21:25:43

Why Shared Fate is a Better Way to Manage Cloud Risk
The shared responsibility model was good enough to cover the first years of the cloud revolution, but the model is showing its limitations. Shared fate is a more mature model for the future of cloud s...
https://www.darkreading.com/google-cloud-security/why-shared-fate-is-a-better-way-to-manage-cloud-risk

2023-09-15 19:26:23

Armis Launches Armis Centrix™, the AI-powered Cyber Exposure Management Platform
https://www.darkreading.com/operations/armis-launches-armis-centrix-the-ai-powered-cyber-exposure-management-platform

2023-09-15 19:26:14

CISO Global Deepens Capabilities With Integrated Threat Intelligence Feed
https://www.darkreading.com/threat-intelligence/ciso-global-deepens-capabilities-with-integrated-threat-intelligence-feed

2023-09-15 19:26:03

Enea Qosmos Threat Detection SDK Launched to Boost the Performance of Network-Based Cybersecurity
https://www.darkreading.com/perimeter/enea-qosmos-threat-detection-sdk-launched-to-boost-the-performance-of-network-based-cybersecurity

2023-09-15 18:51:25

Okta Flaw Involved in MGM Resorts Breach, Attackers Claim
ALPHV/BlackCat ransomware operators have used their leak site to "set the record straight" about the MGM Resorts cyberattack. Meanwhile, more attacks abusing Okta could be likely.
https://www.darkreading.com/application-security/okta-flaw-involved-mgm-resorts-breach-attackers-claim

2023-09-15 18:25:28

Greater Manchester Police Hack Follows Third-Party Supplier Fumble
This incident bears notable resemblance to an attack that occurred just last month affecting London's Metropolitan Police, raising concerns over UK cybersecurity safeguards for public safety.
https://www.darkreading.com/endpoint/greater-manchester-police-hack-third-party-supplier-fumble

2023-09-15 16:26:53

Microsoft: 'Peach Sandstorm' Cyberattacks Target Defense, Pharmaceutical Orgs
For months, the Iran-backed APT has carried out waves of password spray attacks attempting to authenticate to thousands of environments across multiple targets worldwide.
https://www.darkreading.com/application-security/microsoft-peach-sandstorm-cyberattacks-target-defense-pharmaceutical-orgs

2023-09-15 14:51:17

NCSC: Why Cyber Extortion Attacks No Longer Require Ransomware
Ransomware becoming less of a factor as threat actors extort businesses with payment options that are less than regulatory fines.
https://www.darkreading.com/dr-global/ncsc-why-cyber-extortion-attacks-no-longer-require-ransomware

2023-09-15 14:01:23

How to Mitigate Cybersecurity Risks From Misguided Trust
Trust is the crucial bridge between security and people, but excessive or misguided trust can pose serious security risks.
https://www.darkreading.com/vulnerabilities-threats/how-to-mitigate-cybersecurity-risks-from-misguided-trust

2023-09-14 22:25:46

Zero-Click iPhone Exploit Drops Pegasus Spyware on Exiled Russian Journalist
The exploit is one of many that government and intelligence agencies have to infect target devices with the notorious surveillance tool.
https://www.darkreading.com/mobile/nation-state-actor-used-0-click-exploit-to-drop-pegasus-spyware-on-russian-journalist-s-iphone

2023-09-14 22:25:35

Microsoft Teams Hacks Are Back, As Storm-0324 Embraces TeamsPhisher
Collaboration apps are a boost to business productivity, but also a uniquely attractive target for cyberattackers.
https://www.darkreading.com/application-security/microsoft-teams-hacks-storm-0324-teamsphisher

2023-09-14 14:51:17

Mideast Retailers Dogged by Scam Facebook Pages Offering 'Investment' Opportunities
Around 900 pages were identified as using Arabic language and familiar brand names to snare users and steal their money and personal details — presenting big brand protection issues for retailers.
https://www.darkreading.com/dr-global/mideast-retailers-scam-facebook-pages-investment-opportunities

2023-09-14 13:01:07

'Scattered Spider' Behind MGM Cyberattack, Targets Casinos
The ransomware group is a collection of young adults, and also recently breached Caesars Entertainment and made a ransom score in the tens of millions range.
https://www.darkreading.com/attacks-breaches/-scattered-spider-mgm-cyberattack-casinos

2023-09-14 13:00:59

Professional Sports: The Next Frontier of Cybersecurity?
Sports teams, major leagues, global sporting associations, and entertainment venues are all home to valuable personal and business data. Here's how to keep them safe.
https://www.darkreading.com/microsoft/are-professional-sports-the-next-frontier-of-cybersecurity-

2023-09-13 22:00:14

Claroty Unveils Vulnerability & Risk Management Capabilities to Elevate Risk Reduction for Cyber-Physical Systems
https://www.darkreading.com/ics-ot/claroty-unveils-vulnerability-risk-management-capabilities-to-elevate-risk-reduction-for-cyber-physical-systems

2023-09-13 21:50:28

NordVPN Launches Sonar to Prevent Phishing Attacks
https://www.darkreading.com/endpoint/nordvpn-launches-sonar-to-prevent-phishing-attacks

2023-09-11 14:01:08

Overcoming the Rising Threat of Session Hijacking
Passkeys and multifactor authentication aren't enough for combating infostealer malware, which can exfiltrate corporate data before anyone knows an attack happened.
https://www.darkreading.com/vulnerabilities-threats/overcoming-rising-threat-session-hijacking

2023-09-11 14:00:57

Navigating Rwanda's New Data Protection Law
As the law's October 2023 transition deadline approaches, it's critical for organizations doing business in Rwanda to understand its requirements and implications.
https://www.darkreading.com/dr-global/navigating-rwanda-new-data-protection-law