By Tara Seals, Managing Editor, News, Dark Reading — July 21st 2022 at 20:25
The CloudMensis spyware, which can lift reams of sensitive information from Apple machines, is the first Mac malware observed to exclusively rely on cloud storage for C2 activities.
By Dark Reading Staff, Dark Reading — July 21st 2022 at 17:57
Google Cloud pledges experts and other resources to Health Information Sharing and Analysis Center, a community of healthcare infrastructure operators and owners.
By Robert Lemos, Contributing Writer, Dark Reading — July 21st 2022 at 16:30
A study of the unregulated dark markets shows that the vast majority of malware, exploits, and attacker tools sell for less than $10, giving would-be criminals a fast entry point.
By Nathan Eddy, Contributing Writer, Dark Reading — July 21st 2022 at 13:27
The cyber campaign, aimed at siphoning funds, uses an improved version of the malware, which can adjust infection paths based on recognized antivirus software.
New global study from ESG and ISSA reveals nearly half of organizations are consolidating or plan on consolidating the number of vendors they do business with
By Dark Reading Staff, Dark Reading — July 20th 2022 at 19:46
The threat group 8220 Gang's cryptocurrency miner and botnet reach has exploded to 30,000 global hosts, a notable increase over the past month, researchers say.
By Dark Reading Staff, Dark Reading — July 20th 2022 at 18:22
Law enforcement hopes that retuning ransom payments to impacted businesses will demonstrate that working with the feds following a cybersecurity breach is "good business."
By Richard Marcus, Head of Information Security, AuditBoard — July 20th 2022 at 17:00
Security pros' experience with transparency and evaluating third-party partners positions them to act as key environmental, social, and governance advisers.
By Nathan Eddy, Contributing Writer, Dark Reading — July 20th 2022 at 15:05
The LAPSUS$ group emerged with a big splash at the end of 2021, targeting companies, including Okta, with a "reckless and disruptive" approach to hacking.
By Dark Reading Staff, Dark Reading — July 19th 2022 at 20:42
More than 311 local eateries have been breached through online ordering platforms MenuDrive, Harbortouch, and InTouchPOS, impacting 50K records — and counting.
By Jai Vijayan, Contributing Writer, Dark Reading — July 19th 2022 at 19:24
The gang's members have moved into different criminal activities, and could regroup once law-enforcement attention has simmered down a bit, researchers say.
By Robert Lemos, Contributing Writer, Dark Reading — July 19th 2022 at 19:11
With security experts warning against attacks on machine learning models and data, startup HiddenLayer aims to protect the neural networks powering AI-augmented products.
By Shimrit Tzur-David, CTO & Co-founder, Secret Double Octopus — July 19th 2022 at 17:00
Multiple cyber-insurance carriers have adopted act-of-war exclusions due to global political instability and are seeking to stretch the definition of war to deny coverage.
The Curricula platform uses behavioral science with a simplified approach to train and educate users — and marks another step forward in Huntress’ mission to secure the 99%.
By Robert Lemos, Contributing Writer, Dark Reading — July 19th 2022 at 15:00
A GPS device from MiCODUS has six security bugs that could allow attackers to monitor 1.5 million vehicles that use the tracker, or even remotely disable vehicles.
By Nathan Eddy, Contributing Writer, Dark Reading — July 19th 2022 at 13:33
Major supply chain attacks have had a significant impact on software security awareness and decision-making, with more investment planned for monitoring attack surfaces.
By Jai Vijayan, Contributing Writer, Dark Reading — July 18th 2022 at 22:32
Tools purporting to help organizations recover lost passwords for PLCs are really droppers for malware targeting industrial control systems, vendor says.
By Nathan Eddy, Contributing Writer, Dark Reading — July 18th 2022 at 22:10
Linus Torvalds says Retbleed has been addressed in the Linux kernel, but code complexity means the release will be delayed by a week to give more time for testing.
By Dark Reading Staff, Dark Reading — July 18th 2022 at 17:55
An ongoing campaign is actively targeting the vulnerability in the Kaswara Modern WPBakery Page Builder Addon, which is still installed on up to 8,000 sites, security analysts warn.
By Robert Lemos, Contributing Writer, Dark Reading — July 18th 2022 at 16:00
Telecom and business services see the highest level of attacks, but the two most common ransomware families, which continue to be LockBit and Conti, are seen less often.
By Michael Bargury, CTO & Co-Founder, Zenity — July 18th 2022 at 14:00
How a well-meaning employee could unwittingly share their identity with other users, causing a whole range of problems across IT, security, and the business.
By Dark Reading Staff, Dark Reading — July 15th 2022 at 18:30
IT asset tracker and auditor software has a critical issue with insecure object deserialization that could allow threat actors to execute code, researchers say.
By John Ayers, Vice President of Product, Advanced Detection & Response, Optiv — July 15th 2022 at 18:13
As more employees plan on taking longer holidays and working remotely from the destination for part of that time, organizations have to consider the risks. Like Wi-Fi networks.
By Kelly Jackson Higgins, Editor-in-Chief, Dark Reading — July 15th 2022 at 15:16
Researchers who helped thwart the Russian nation-state group's recent attack on Ukraine's power supply will disclose at Black Hat USA what they found while reverse-engineering the powerful Industroyer2 malware used by the powerful hacking team.
By Jai Vijayan, Contributing Writer, Dark Reading — July 14th 2022 at 20:43
Vulnerability will remain a "significant" threat for years to come and highlighted the need for more public and private sector support for open source software ecosystem, Cyber Safety Review Board says.
By Robert Lemos, Contributing Writer, Dark Reading — July 14th 2022 at 14:50
Bitcoin is down more than 70% from its highs late last year, causing disruptions for cybercriminals and the underground exchanges that fuel the dark markets.
Most organizations are flying blind when remediating vulnerabilities. We lack the tooling to secure software fast enough. We need a new approach to vulnerability management now.
Login
FreshRSS