By Robert Lemos, Contributing Writer, Dark Reading — January 30th 2023 at 16:45
Cybercriminals are co-opting the identities of legitimate US financial advisers to use them as fodder for relationship scams (aka "pig butchering"), which end with the theft of investments.
By Pavel Livshiz, General Partner, Hetz Ventures — January 30th 2023 at 15:00
Solutions that provide more actionable results — remediation that frees up engineers, processes which integrate security into software development from its design, along with automation, IAC, and tool consolidation — are among the DevSecOps strategies that will prevail this year.
By Nathan Eddy, Contributing Writer, Dark Reading — January 27th 2023 at 16:11
Google has mounted a massive takedown, but Dragonbridge's extensive capabilities for generating and distributing vast amounts of largely spammy content calls into question the motivation behind the group.
By Jai Vijayan, Contributing Writer, Dark Reading — January 27th 2023 at 15:49
An academic analysis of website defacement behavior by 241 new hackers shows there are four clear trajectories they can take in the future, researchers say.
A vulnerability within Microsoft's OAuth application registration allows an attacker to create hidden forwarding rules that act as a malicious SaaS rootkit.
By Ericka Chickowski, Contributing Writer, Dark Reading — January 26th 2023 at 18:18
The rapid maturation and rebranding of ransomware groups calls for relentless preparation and flexibility in response, according to one view from the trenches.
By Robert Lemos, Contributing Writer, Dark Reading — January 26th 2023 at 17:36
Only one in 10 enterprises will create a robust zero-trust foundation in the next three years, while more than half of attacks won't even be prevented by it, according to Gartner.
Advanced workflow, approval process, and management dashboard enhance control, distribution, and supervision, while reducing errors and streamlining the entire SBOM management process.
By Robert Lemos, Contributing Writer, Dark Reading — January 25th 2023 at 22:17
Two common attacks against on-premises Kerberos authentication servers — known as Pass the Ticket and Silver Ticket — can be used against Microsoft's Azure AD Kerberos, a security firms says.
By Dark Reading Staff, Dark Reading — January 25th 2023 at 21:43
Zacks Elite sign-ups for the period 1999–2005 were accessed, including name, address, email address, phone number, and the password associated with Zacks.com.
By Zur Ulianitzky, Head of Security Research, XM Cyber — January 25th 2023 at 18:00
Don't make perfect the enemy of good in vulnerability management. Context is key — prioritize vulnerabilities that are actually exploitable. Act quickly if the vulnerability is on a potential attack path to a critical asset.
By Dark Reading Staff, Dark Reading — January 25th 2023 at 00:34
Skyhawk Synthesis extends cloud security misconfiguration detection across multiple clouds, the company says — throwing cloud security posture management in for free.
By Becky Bracken, Editor, Dark Reading — January 24th 2023 at 22:02
Ticketmaster testified in the Senate that a cyberattack was to blame for the high-profile Taylor Swift concert sales collapse, but some senators aren't so sure.
Respondents indicate organizations are unprepared to handle cyberwarfare, there's no one-size-fits-all response to ransomware, and cybersecurity spending is on the rise.
By Robert Lemos, Contributing Writer, Dark Reading — January 24th 2023 at 15:59
The company will block the configuration files, which interact with Web applications — since threat actors increasingly use the capability to install malicious code.
Login
.jpg)
FreshRSS