Round of $14.5M to support team of AI experts and cybersecurity leaders targeting overshared data with AI-based solutions for data access governance and loss prevention.
By Charles Horton, Chief Operating Officer, NetSPI — May 11th 2022 at 17:00
New federal cybersecurity rules will set timelines for critical infrastructure sector organizations — those in chemical, manufacturing, healthcare, defense contracting, energy, financial, nuclear, or transportation — to report ransomware payments and cyberattacks to CISA. All parties have to comply for it to work and help protect assets.
NYC-area cybersecurity expert shares the anatomy of a Quantum Ransomware attack and how to prevent, detect and recover from a ransomware attack, in a new article from eMazzanti Technologies.
Analysis finds 687 million exposed credentials and personally identifiable information (PII) among Fortune 1000 employees, and a 64% password reuse rate.
By Robert Lemos, Contributing Writer, Dark Reading — May 10th 2022 at 15:37
The Dark Crystal remote access Trojan (aka DCRat) breaks a few stereotypes, with coding done by a solo developer, using an obscure Web language and offering it at a frighteningly low price.
Company delivers new vulnerability management offering to help resource-constrained organizations combat increasing attacks on mission-critical SAP applications .
By Dark Reading Staff, Dark Reading — May 9th 2022 at 23:35
This Tech Tip walks network administrators through the steps to address the latest critical remote code execution vulnerability (CVE-2022-1388) in F5's BIG-IP management interface.
By Jai Vijayan, Contributing Writer, Dark Reading — May 9th 2022 at 22:19
The infamous Joker threat is back in Google Play, along with other Trojanized mobile apps that secretly sign Android users up for paid subscription services.
By Jai Vijayan, Contributing Writer, Dark Reading — May 9th 2022 at 19:04
Cybersecurity has to be a top priority as enterprises begin incorporating the use of nonfungible tokens into their business strategies, brand-awareness campaigns, and employee-communication efforts, experts say.
By Sue Poremba, Contributing Writer — May 6th 2022 at 19:27
The attack may have been "a major wake-up call" about the need for greater resilience in IT environments, but have security teams hit the snooze bar one too many times?
By Jai Vijayan, Contributing Writer, Dark Reading — May 6th 2022 at 19:25
An operational slip-up led security researchers to an attacker associated with Nigerian letter scams and malware distribution, after he infected himself with Agent Tesla.
By Fahmida Y. Rashid, Managing Editor, Features, Dark Reading — May 5th 2022 at 22:08
The passwordless future just became closer to reality, as Microsoft, Apple, and Google pledge to make the standard possible across operating systems and browsers.
By Jai Vijayan, Contributing Writer, Dark Reading — May 5th 2022 at 21:21
The same attack that allowed a threat actor to steal data from private Heroku GitHub repositories also resulted in the compromise of customer credentials, the company now says.
By Dark Reading Staff, Dark Reading — May 5th 2022 at 19:39
Amid ongoing software supply-chain jitters, the US' top tech division is offering a finalized, comprehensive cybersecurity control framework for managing risk.
By Tara Seals, Managing Editor, News, Dark Reading — May 5th 2022 at 18:31
The vendor also disclosed two other security vulnerabilities that would allow remote, unauthenticated attackers to inject commands as root and snoop on sensitive user information.
With 80% of companies using cloud collaboration tools, cybercriminals are using multichannel phishing attacks to exploit security gaps in the hybrid work model.
By Kelly Jackson Higgins, Editor-in-Chief — May 5th 2022 at 15:04
Researcher to reveal fresh details at Black Hat Asia on a tenacious cyber-espionage group attacking specific military, law enforcement, aviation, and other entities in Central and South Asia.
By Robert Lemos, Contributing Writer, Dark Reading — May 5th 2022 at 14:16
Cloud containers are increasingly part of the cybercrime playbook, with researchers flagging ongoing scanning for Docker weaknesses along with rapid exploitation to infect systems with coin-miners, denial-of-service tools, and ransomware.
By Pascal Geenens, Director, Threat Intelligence, Radware — May 5th 2022 at 14:00
As the gaming sector booms, game publishers and gaming networks have been heavily targeted with distributed denial-of-service (DDoS) attacks in the last year.
By Jai Vijayan, Contributing Writer — May 4th 2022 at 20:07
Operation CuckooBees uncovered the state-sponsored group's sophisticated new tactics in a years-long campaign that hit more than 30 tech and manufacturing companies.
By Tyler Farrar, CISO, Exabeam — May 4th 2022 at 17:00
A company's response to a breach is more important than almost anything else. But what constitutes a "good" response following a security incident? (Part 2 of a series.)
By Robert Lemos, Contributing Writer — May 4th 2022 at 15:01
Companies see AI-powered cybersecurity tools and systems as the future, but at present nearly 90% of them say they face significant hurdles in making use of them.
By Bud Broomhead, CEO, Viakoo — May 3rd 2022 at 22:42
The Internet of Things needs to be part of the overall corporate information security policy to prevent adversaries from using these devices as an entry point.
By Dark Reading Staff, Dark Reading — May 3rd 2022 at 20:35
The same infrastructure traced back to Russian-speaking threat group Nobelium is being used to set up misspelled domain names, presaging impersonation attacks bent on credential harvesting, analysts say.
Login
.jpeg)
FreshRSS