FreshRSS

πŸ”’
☐ β˜† βœ‡ Dark Reading:

10 Malicious Code Packages Slither into PyPI Registry

By Jai Vijayan, Contributing Writer, Dark Reading β€” August 8th 2022 at 19:00
The discovery adds to the growing list of recent incidents where threat actors have used public code repositories to distribute malware in software supply chain attacks.

☐ β˜† βœ‡ Dark Reading:

Dark Reading News Desk: Live at Black Hat USA 2022

By Dark Reading Staff, Dark Reading β€” August 11th 2022 at 13:00
TODAY at 10 PT: Dark Reading News Desk returns to Black Hat USA 2022

☐ β˜† βœ‡ Dark Reading:

Deepfakes Grow in Sophistication, Cyberattacks Rise Following Ukraine War

By Nathan Eddy, Contributing Writer, Dark Reading β€” August 8th 2022 at 15:28
A rising tide of threats β€” from API exploits to deepfakes to extortionary ransomware attacks β€” is threatening to overwhelm IT security teams.

☐ β˜† βœ‡ Dark Reading:

HYAS Infosec Announces General Availability of Cybersecurity Solution for Production Environments

August 8th 2022 at 14:27
HYAS Confront provides total visibility into your production environment, giving you insight into potential issues like cyber threats before they become problems.
☐ β˜† βœ‡ Dark Reading:

We Have the Tech to Scale Up Open Source Vulnerability Fixes β€” Now It's Time to Leverage It

By Ericka Chickowski, Contributing Writer, Dark Reading β€” August 8th 2022 at 14:20
Q&A with Jonathan Leitschuh, inaugural HUMAN Dan Kaminsky Fellow, in advance of his upcoming Black Hat USA presentation.

☐ β˜† βœ‡ Dark Reading:

What Adjustable Dumbbells Can Teach Us About Risk Management

By Joshua Goldfarb, Fraud Solutions Architect - EMEA and APCJ, F5 β€” August 8th 2022 at 14:07
A new workout leads to five smart lessons about the importance of converging security and fraud into a unified risk function.

☐ β˜† βœ‡ Dark Reading:

Pipeline Operators Are Headed in the Right Direction, With or Without TSA's Updated Security Directives

By Duncan Greatwood, CEO, Xage β€” August 8th 2022 at 14:00
A worsening threat landscape, increased digitization, and the long-term positive effects of modern security strategies are pushing critical infrastructure operators to do better.

☐ β˜† βœ‡ Dark Reading:

What Worries Security Teams About the Cloud?

By Edge Editors, Dark Reading β€” August 5th 2022 at 18:25
What issues are cybersecurity professionals concerned about in 2022? You tell us!

☐ β˜† βœ‡ Dark Reading:

Genesis IAB Market Brings Polish to the Dark Web

By Nathan Eddy, Contributing Writer, Dark Reading β€” August 5th 2022 at 17:12
As the market for initial access brokers matures, services like Genesis β€” which offers elite access to compromised systems and slick, professional services β€” are raising the bar in the underground economy.

☐ β˜† βœ‡ Dark Reading:

A Ransomware Explosion Fosters Thriving Dark Web Ecosystem

By Jai Vijayan, Contributing Writer, Dark Reading β€” August 5th 2022 at 16:38
For the right price, threat actors can get just about anything they want to launch a ransomware attack β€” even without technical skills or any previous experience.

☐ β˜† βœ‡ Dark Reading:

Stolen Data Gives Attackers Advantage Against Text-Based 2FA

By Robert Lemos, Contributing Writer, Dark Reading β€” August 5th 2022 at 16:25
With names, email addresses, and mobile numbers from underground databases, one person in five is at risk of account compromise even with SMS two-factor authentication in place.

☐ β˜† βœ‡ Dark Reading:

Fresh RapperBot Malware Variant Brute-Forces Its Way Into SSH Servers

By Dark Reading Staff, Dark Reading β€” August 5th 2022 at 16:20
Over the past few weeks, a Mirai variant appears to have made a pivot from infecting new servers to maintaining remote access.

☐ β˜† βœ‡ Dark Reading:

A Digital Home Has Many Open Doors

By Scott Cadzow, Chair, ETSI Encrypted Traffic Integration ISG β€” August 5th 2022 at 14:00
Development of digital gateways to protect the places where we live, work, and converse need to be secure and many doors need to offer restricted access.

☐ β˜† βœ‡ Dark Reading:

How to Resolve Permission Issues in CI/CD Pipelines

By Asim Rahal, InfoSec consultant β€” August 5th 2022 at 14:00
This Tech Tip outlines how DevOps teams can address security integration issues in their CI/CD pipelines.

☐ β˜† βœ‡ Dark Reading:

Cyberattackers Increasingly Target Cloud IAM as a Weak Link

By Tara Seals, Managing Editor, News, Dark Reading β€” August 4th 2022 at 21:43
At Black Hat USA, Igal Gofman plans to address how machine identities in the cloud and the explosion of SaaS apps are creating risks for IAM, amid escalating attention from attackers.

☐ β˜† βœ‡ Dark Reading:

Amazon, IBM Move Swiftly on Post-Quantum Cryptographic Algorithms Selected by NIST

By Jeffrey Schwartz, Contributing Writer β€” August 4th 2022 at 21:03
A month after the algorithms were revealed, some companies have already begun incorporating the future standards into their products and services.

☐ β˜† βœ‡ Dark Reading:

Time to Patch VMware Products Against a Critical New Vulnerability

By Dark Reading Staff, Dark Reading β€” August 4th 2022 at 20:36
A dangerous VMware authentication-bypass bug could give threat actors administrative access over virtual machines.

☐ β˜† βœ‡ Dark Reading:

Bug in Kaspersky VPN Client Allows Privilege Escalation

By Tara Seals, Managing Editor, News, Dark Reading β€” August 4th 2022 at 18:35
The CVE-2022-27535 local privilege-escalation security vulnerability in the security software threatens remote and work-from-home users.

☐ β˜† βœ‡ Dark Reading:

How Email Security Is Evolving

August 4th 2022 at 18:05
Securing email communication has never been more critical for organizations, and it has never been more challenging to do so. Attack volumes have increased and become more sophisticated.
☐ β˜† βœ‡ Dark Reading:

Massive China-Linked Disinformation Campaign Taps PR Firm for Help

By Nathan Eddy, Contributing Writer, Dark Reading β€” August 4th 2022 at 15:16
A global network of inauthentic news sites present themselves as independent news outlets, offering content favoring China's government and articles critical of the US.

☐ β˜† βœ‡ Dark Reading:

Phylum Releases a Free Community Edition to Make Software Supply Chain Security More Accessible

August 4th 2022 at 14:50
Users can identify risks across five domains, work on multiple projects, and take advantage of exclusive community benefits.
☐ β˜† βœ‡ Dark Reading:

The Myth of Protection Online β€” and What Comes Next

By Steve Ryan, Founder & CEO, Trinity Cyber β€” August 4th 2022 at 14:00
It's a myth that consuming and processing alerts qualifies as security. Today's technology allows better detection and prevention, rather than accepting the low bar for protection set by ingrained incident response reactions.

☐ β˜† βœ‡ Dark Reading:

Deep Instinct Pioneers Deep-Learning Malware Prevention to Protect Mission-Critical Business Applications at Scale

August 4th 2022 at 13:26
Agentless approach meets the attacker earlier to protect financial services and other large enterprises from an underserved attack vector.
☐ β˜† βœ‡ Dark Reading:

35K Malicious Code Insertions in GitHub: Attack or Bug-Bounty Effort?

By Robert Lemos, Contributing Writer, Dark Reading β€” August 4th 2022 at 13:21
In the last month, "Pl0xP" cloned several GitHub repositories, adding malicious code to the forks that would attempt to infect developer systems and steal sensitive files that included software keys.

☐ β˜† βœ‡ Dark Reading:

Ping Identity to Go Private After $2.8B Acquisition

By Dark Reading Staff, Dark Reading β€” August 4th 2022 at 13:17
The identity-services company is being acquired by Thoma Bravo software investment for cash, before being delisted.

☐ β˜† βœ‡ Dark Reading:

Startup Footprint Tackles Identity Verification

By Dark Reading Staff, Dark Reading β€” August 3rd 2022 at 23:50
Early-stage startup Footprint's goal is to provide tools that change how enterprises verify, authentication, authorize, and secure identity.

☐ β˜† βœ‡ Dark Reading:

How IT Teams Can Use 'Harm Reduction' for Better Cybersecurity Outcomes

By Tara Seals, Managing Editor, News, Dark Reading β€” August 3rd 2022 at 21:25
Copado's Kyle Tobener will discuss a three-pronged plan at Black Hat USA for addressing human weaknesses in cybersecurity with this medical concept β€” from phishing to shadow IT.

☐ β˜† βœ‡ Dark Reading:

Critical RCE Bug in DrayTek Routers Opens SMBs to Zero-Click Attacks

By Tara Seals, Managing Editor, News, Dark Reading β€” August 3rd 2022 at 20:23
SMBs should patch CVE-2022-32548 now to avoid a host of horrors, including complete network compromise, ransomware, state-sponsored attacks, and more.

☐ β˜† βœ‡ Dark Reading:

School Kid Uploads Ransomware Scripts to PyPI Repository as 'Fun' Project

By Jai Vijayan, Contributing Writer, Dark Reading β€” August 3rd 2022 at 19:57
The malware packages had names that were common typosquats of a legitimate widely used Python library. One was downloaded hundreds of times.

☐ β˜† βœ‡ Dark Reading:

Cyberattackers Drain Nearly $6M From Solana Crypto Wallets

By Dark Reading Staff, Dark Reading β€” August 3rd 2022 at 17:42
So far, the ongoing attack has impacted nearly 8,000 Solana hot wallets.

☐ β˜† βœ‡ Dark Reading:

Zero-Day Defense: Tips for Defusing the Threat

By Ryan Barnett, Principal Security Researcher, Akamai β€” August 3rd 2022 at 17:00
Because they leave so little time to patch and defuse, zero-day threats require a proactive, multilayered approach based on zero trust.

☐ β˜† βœ‡ Dark Reading:

ShiftLeft Appoints Prevention-First, Cybersecurity Visionary and AI/ML Pioneer Stuart McClure as CEO

August 3rd 2022 at 15:38
Serial entrepreneur, cybersecurity leader, and industry veteran joins ShiftLeft to drive growth and AI/ML innovation globally.
☐ β˜† βœ‡ Dark Reading:

Druva Introduces the Data Resiliency Guarantee of up to $10 Million

August 3rd 2022 at 15:33
The new program offers robust protection across all five data risk categories: cyber, human, application, operation, and environmental.
☐ β˜† βœ‡ Dark Reading:

CompTIA CEO Outlines Initiative to Create the Pre-eminent Destination to Start, Build and β€˜Supercharge’ a Tech Career

August 3rd 2022 at 15:21
Todd Thibodeaux uses ChannelCon 2022 state of the industry remarks to unveil CompTIA’s Project Agora; invites broad industry participation in the effort to fight for tech talent.
☐ β˜† βœ‡ Dark Reading:

Netskope Acquires Infiot, Will Deliver Fully Integrated, Single-Vendor SASE Platform

August 3rd 2022 at 14:16
Converged SASE platform provides AI-driven Zero trust security and simplified, optimized connectivity to any network location or device, including IoT.
☐ β˜† βœ‡ Dark Reading:

5 Ways Chess Can Inspire Strategic Cybersecurity Thinking

By Miki Shifman, CTO and Co-Founder, Cylus β€” August 3rd 2022 at 14:00
Rising interest in chess may feed the next generation of cybersecurity experts.

☐ β˜† βœ‡ Dark Reading:

American Express, Snapchat Open-Redirect Vulnerabilities Exploited in Phishing Scheme

By Nathan Eddy, Contributing Writer, Dark Reading β€” August 3rd 2022 at 13:52
Phishing operators are taking advantage of security bugs in the Amex and Snapchat websites (the latter is unpatched) to steer victims to phishing pages looking to harvest Google and Microsoft logins.

☐ β˜† βœ‡ Dark Reading:

Thousands of Mobile Apps Leaking Twitter API Keys

By Jai Vijayan, Contributing Writer, Dark Reading β€” August 2nd 2022 at 22:05
New finding comes amid report of overall surge in threats targeting mobile and IoT devices over the past year.

☐ β˜† βœ‡ Dark Reading:

Large Language AI Models Have Real Security Benefits

By Robert Lemos, Contributing Writer, Dark Reading β€” August 2nd 2022 at 22:03
Complex neural networks, including GPT-3, can deliver useful cybersecurity capabilities, such as explaining malware and quickly classifying websites, researchers find.

☐ β˜† βœ‡ Dark Reading:

Massive New Phishing Campaign Targets Microsoft Email Service Users

By Dark Reading Staff, Dark Reading β€” August 2nd 2022 at 21:04
The campaign uses adversary-in-the-middle techniques to bypass multifactor authentication, evade detection.

☐ β˜† βœ‡ Dark Reading:

From Babuk Source Code to Darkside Custom Listings β€” Exposing a Thriving Ransomware Marketplace on the Dark Web

August 2nd 2022 at 20:30
Venafi investigation of 35 million Dark Web URLs shows macro-enabled ransomware widely available at bargain prices.
☐ β˜† βœ‡ Dark Reading:

Manufacturing Sector in 2022 Is More Vulnerable to Account Compromise and Supply Chain Attacks in the Cloud than Other Verticals

August 2nd 2022 at 20:04
Netwrix study reveals that manufacturing organizations experienced these types of attacks more often than any other industry surveyed.
☐ β˜† βœ‡ Dark Reading:

Axis Raises the Bar With Modern-Day ZTNA Service that Boasts Hyper-Intelligence, Simplicity, and 350 Global Edges

August 2nd 2022 at 19:31
Launches industry’s first ZTNA migration tool and ZTNA buyback program, setting the stage for migration away from ZTNA 1.0.
☐ β˜† βœ‡ Dark Reading:

T-Mobile Store Owner Made $25M Using Stolen Employee Credentials

By Dark Reading Staff, Dark Reading β€” August 2nd 2022 at 18:30
Now-convicted phone dealer reset locked and blocked phones on various mobile networks.

☐ β˜† βœ‡ Dark Reading:

Microsoft Intros New Attack Surface Management, Threat Intel Tools

By Dark Reading Staff, Dark Reading β€” August 2nd 2022 at 17:05
Microsoft says the new tools will give security teams an attacker's-eye view of their systems and supercharge their investigation and remediation efforts.

☐ β˜† βœ‡ Dark Reading:

Capital One Breach Conviction Exposes Scale of Cloud Entitlement Risk

By Shai Morag, CEO, Ermetic β€” August 2nd 2022 at 17:00
To protect against similar attacks, organizations should focus on bringing cloud entitlements and configurations under control.

☐ β˜† βœ‡ Dark Reading:

VirusTotal: Threat Actors Mimic Legitimate Apps, Use Stolen Certs to Spread Malware

By Nathan Eddy, Contributing Writer, Dark Reading β€” August 2nd 2022 at 16:00
Attackers are turning to stolen credentials and posing as trusted applications to socially engineer victims, according to Google study of malware submitted to VirusTotal.

☐ β˜† βœ‡ Dark Reading:

Incognia Mobile App Study Reveals Low Detection of Location Spoofing in Dating Apps

August 2nd 2022 at 15:24
With over 323 million users of dating apps worldwide, study finds location spoofing is a threat to user trust and safety.
☐ β˜† βœ‡ Dark Reading:

Cybrary Lands $25 Million in New Funding Round

August 2nd 2022 at 14:50
Series C investment from BuildGroup and Gula Tech Adventures, along with appointment of Kevin Mandia to the board of directors, will propel a new chapter of company growth.
☐ β˜† βœ‡ Dark Reading:

BlackCloak Bolsters Malware Protection With QR Code Scanner and Malicious Calendar Detection Features

August 2nd 2022 at 14:50
In conjunction with Black Hat 2022, pioneer of digital executive protection also announces new security innovations and SOC 2 Type II certification.
☐ β˜† βœ‡ Dark Reading:

5 Steps to Becoming Secure by Design in the Face of Evolving Cyber Threats

By Sudhakar Ramakrishna, CEO, SolarWinds β€” August 2nd 2022 at 14:00
From adopting zero-trust security models to dynamic environments to operating under an "assumed breach" mentality, here are ways IT departments can reduce vulnerabilities as they move deliberately to become more secure.

☐ β˜† βœ‡ Dark Reading:

CREST Defensible Penetration Test Released

August 2nd 2022 at 13:53
CREST provides commercially defensible scoping, delivery, and sign-off recommendations for penetration tests.
☐ β˜† βœ‡ Dark Reading:

DoJ: Foreign Adversaries Breach US Federal Court Records

By Dark Reading Staff, Dark Reading β€” August 1st 2022 at 20:47
A Justice Department official testifies to a House committee that the cyberattack is a "significant concern."

☐ β˜† βœ‡ Dark Reading:

Ransomware Hit on European Pipeline & Energy Supplier Encevo Linked to BlackCat

By Dark Reading Staff, Dark Reading β€” August 1st 2022 at 19:36
Customers across several European countries are urged to update credentials in the wake of the attack that affected a gas-pipeline operator and power company.

☐ β˜† βœ‡ Dark Reading:

Credential Canaries Create Minefield for Attackers

By Robert Lemos, Contributing Writer, Dark Reading β€” August 1st 2022 at 18:57
Canary tokens β€” also known as honey tokens β€” force attackers to second-guess their potential good fortune when they come across user and application secrets.

☐ β˜† βœ‡ Dark Reading:

Chromium Browsers Allow Data Exfiltration via Bookmark Syncing

By Jai Vijayan, Contributing Writer, Dark Reading β€” August 1st 2022 at 17:42
"Bruggling" emerges as a novel technique for pilfering data out from a compromised environment β€” or for sneaking in malicious code and attack tools.

☐ β˜† βœ‡ Dark Reading:

Name That Edge Toon: Up a Tree

By John Klossner, Cartoonist β€” August 1st 2022 at 16:41
Come up with a clever caption, and our panel of experts will reward the winner with a $25 Amazon gift card.

☐ β˜† βœ‡ Dark Reading:

For Big Tech, Neutrality Is Not an Option β€” and Never Really Was

By Francis Dinha, CEO & Co-Founder, OpenVPN β€” August 1st 2022 at 14:00
Tech companies play a vital role in global communication, which has profound effects on how politics, policies, and human rights issues play out.

☐ β˜† βœ‡ Dark Reading:

AWS Focuses on Identity Access Management at re:Inforce

By Jeffrey Schwartz, Contributing Writer β€” July 29th 2022 at 20:56
Identity and access management was front and center at AWS re:inforce this week.

☐ β˜† βœ‡ Dark Reading:

Attackers Have 'Favorite' Vulnerabilities to Exploit

By Edge Editors, Dark Reading β€” July 29th 2022 at 20:28
While attackers continue to rely on older, unpatched vulnerabilities, many are jumping on new vulnerabilities as soon as they are disclosed.

❌