2023-02-05T01:54:39Z https://yabu.me darkreading https://yabu.me/npub1l8jja0522xuslk4vcu67sgkkac6cmyw66sr8druq4ajxkly967tsgw3gsu https://www.darkreading.com/favicon.ico https://www.darkreading.com/favicon.ico https://yabu.me/nevent1qqswyhm8qan0l0wgyt4kj9sygddvx2dn8s7gmleawyyf6u0qcd4gyyczyru72t473fgmjr764nrnt6pz6mhrtrv3mt2qva50szhkg6mushtew35uc5m SOCRadar Secures $25.2M in Funding to Combat Multibillion-Dollar Cybersecurity Threats<br/><br/><a href="https://www.darkreading.com/cybersecurity-operations/socradar-secures-25-2m-in-funding-to-combat-multibillion-dollar-cyber-security-threats">https://www.darkreading.com/cybersecurity-operations/socradar-secures-25-2m-in-funding-to-combat-multibillion-dollar-cyber-security-threats</a> 2024-05-23T22:00:37Z https://yabu.me/nevent1qqspxr7w88kfppg564vxltqqen6js4x7mvug7v09fevuew0uc4qgmrgzyru72t473fgmjr764nrnt6pz6mhrtrv3mt2qva50szhkg6mushtewq902ym Seizing Control of the Cloud Security Cockpit<br/><br/>Much like an airplane&#39;s dashboard, configurations are the way we control cloud applications and SaaS tools. It&#39;s also the entry point for too many security threats. Here are some ideas for making the ...<br/><br/><a href="https://www.darkreading.com/cloud-security/seizing-control-cloud-security-configuration-cockpit">https://www.darkreading.com/cloud-security/seizing-control-cloud-security-configuration-cockpit</a> 2024-05-23T22:00:28Z https://yabu.me/nevent1qqs9yjnv39vw5p3grx0053a2h6lftlxae2c2vyemkrmz0nag0cqmljqzyru72t473fgmjr764nrnt6pz6mhrtrv3mt2qva50szhkg6mushtew8mml4c Concentric AI to Unveil Data Security Remediation and Compliance Reporting Capabilities at Infosecurity Europe 2024<br/><br/><a href="https://www.darkreading.com/application-security/concentric-ai-to-unveil-new-data-security-remediation-and-compliance-reporting-capabilities-at-infosecurity-europe-2024">https://www.darkreading.com/application-security/concentric-ai-to-unveil-new-data-security-remediation-and-compliance-reporting-capabilities-at-infosecurity-europe-2024</a> 2024-05-23T22:00:20Z https://yabu.me/nevent1qqsrs6vx5un0rp5vt5v3yklp2jpglhd62u5c2vfxzs5ygweellpg64czyru72t473fgmjr764nrnt6pz6mhrtrv3mt2qva50szhkg6mushtewkjpqdq Bugcrowd Acquires Informer to Enhance Attack Surface Management, Penetration Testing<br/><br/><a href="https://www.darkreading.com/cyberattacks-data-breaches/bugcrowd-acquires-informer-to-enhance-attack-surface-management-penetration-testing">https://www.darkreading.com/cyberattacks-data-breaches/bugcrowd-acquires-informer-to-enhance-attack-surface-management-penetration-testing</a> 2024-05-23T21:50:16Z https://yabu.me/nevent1qqsg696jlmwq7679wx5qgmazyqx296x3n0nvz3ee53pwy7fp84d8g3szyru72t473fgmjr764nrnt6pz6mhrtrv3mt2qva50szhkg6mushtewwvcns7 MIT Brothers Charged With Exploiting Ethereum to Steal $25 Million<br/><br/>The two MIT graduates discovered a flaw in a common trading tool for the Ethereum blockchain. Does it presage problems ahead for cryptocurrency?<br/><br/><a href="https://www.darkreading.com/cyberattacks-data-breaches/mit-brothers-charged-with-exploiting-ethereum-to-steal-25-million-dollars">https://www.darkreading.com/cyberattacks-data-breaches/mit-brothers-charged-with-exploiting-ethereum-to-steal-25-million-dollars</a> 2024-05-23T21:26:29Z https://yabu.me/nevent1qqsyhqlvnewhjxsnszgy3q8k2vl2e8095xpjgdkyjf5emexz6x32ffgzyru72t473fgmjr764nrnt6pz6mhrtrv3mt2qva50szhkg6mushtew9q9ejk Courtroom Recording Platform JAVS Hijacked in Supply Chain Attack<br/><br/>With more than 10,000 installations across prisons, courts, and governments, impacted Justice AV Solutions users are urged to re-image affected endpoints and reset credentials.<br/><br/><a href="https://www.darkreading.com/cyberattacks-data-breaches/courtroom-recording-platform-javs-hijacked-for-supply-chain-attack">https://www.darkreading.com/cyberattacks-data-breaches/courtroom-recording-platform-javs-hijacked-for-supply-chain-attack</a> 2024-05-23T21:00:16Z https://yabu.me/nevent1qqs906us3ku9g8x02mnhvndm3dcm6dc5e9mzzra0pjk633w635x5q4gzyru72t473fgmjr764nrnt6pz6mhrtrv3mt2qva50szhkg6mushtewjhrr43 Stalkerware App With Security Bug Discovered on Hotel Systems<br/><br/>The spyware is able to capture screenshots of a user&#39;s device every few seconds from any location globally.<br/><br/><a href="https://www.darkreading.com/cyber-risk/stalkerware-app-with-security-bug-discovered-on-hotel-systems">https://www.darkreading.com/cyber-risk/stalkerware-app-with-security-bug-discovered-on-hotel-systems</a> 2024-05-23T20:25:17Z https://yabu.me/nevent1qqsrzxk5zf2kl7k6725nexdtnce33pf64kr75kyng9hkd0xmtqccfuszyru72t473fgmjr764nrnt6pz6mhrtrv3mt2qva50szhkg6mushtew9rvqlm New Gift Card Scam Targets Retailers, Not Buyers, to Print Endless $$$<br/><br/>Microsoft researchers discover an old-timey scam with a facelift for the cloud era: hacking retailers&#39; portals to make it rain gift cards.<br/><br/><a href="https://www.darkreading.com/threat-intelligence/new-gift-card-scam-targets-retailers-not-buyers-to-print-endless-money">https://www.darkreading.com/threat-intelligence/new-gift-card-scam-targets-retailers-not-buyers-to-print-endless-money</a> 2024-05-23T19:00:17Z https://yabu.me/nevent1qqsqxtacx58j462795ld22euzmxp9z5hrzfwsrm77g6xrv8hexlapqszyru72t473fgmjr764nrnt6pz6mhrtrv3mt2qva50szhkg6mushtew75fgth New Mindset Needed for Large Language Models<br/><br/>With the right mix of caution, creativity, and commitment, we can build a future where LLMs are not just powerful, but also fundamentally trustworthy.<br/><br/><a href="https://www.darkreading.com/cybersecurity-operations/new-mindset-needed-for-large-language-models">https://www.darkreading.com/cybersecurity-operations/new-mindset-needed-for-large-language-models</a> 2024-05-23T14:02:35Z https://yabu.me/nevent1qqsrv37tl5rgq5hgcdkg855w2l5jj9cqud2qla55fjt5unmnaw2fxrgzyru72t473fgmjr764nrnt6pz6mhrtrv3mt2qva50szhkg6mushtewumcpr6 Critical Flaw in Replicate AI Platform Exposes Proprietary Data<br/><br/>The finding underscores the challenges of protecting data from multiple customers across AI-as-a-service solutions, especially in environments that run AI models from untrusted sources.<br/><br/><a href="https://www.darkreading.com/cloud-security/critical-flaw-in-replicate-ai-platform-exposes-customer-models-proprietary-data">https://www.darkreading.com/cloud-security/critical-flaw-in-replicate-ai-platform-exposes-customer-models-proprietary-data</a> 2024-05-23T14:02:26Z https://yabu.me/nevent1qqstls3vcxk2evtr7ad03884lcwlnmywqvr9l725hyvn5c27ym0kvhgzyru72t473fgmjr764nrnt6pz6mhrtrv3mt2qva50szhkg6mushtew03n0t4 Persistent Burnout Is Still a Crisis in Cybersecurity<br/><br/>Burnout has been an oft-reported problem among security professionals for years. Are there any new ideas for supporting mental health in the industry?<br/><br/><a href="https://www.darkreading.com/cybersecurity-careers/persistent-burnout-is-still-a-crisis-in-cybersecurity">https://www.darkreading.com/cybersecurity-careers/persistent-burnout-is-still-a-crisis-in-cybersecurity</a> 2024-05-23T12:27:02Z https://yabu.me/nevent1qqsvlchlva62mcs3g90w5vvew0228aldcv06xyedtt6g5saga96z7vqzyru72t473fgmjr764nrnt6pz6mhrtrv3mt2qva50szhkg6mushtewsjpwvc China APT Stole Geopolitical Secrets From Middle East, Africa &amp;amp;amp; Asia<br/><br/>One of China&#39;s biggest espionage operations owes its success to longstanding Microsoft Exchange bugs, open source tools, and old malware.<br/><br/><a href="https://www.darkreading.com/threat-intelligence/china-apt-stole-geopolitical-secrets-from-middle-east-africa-and-asia">https://www.darkreading.com/threat-intelligence/china-apt-stole-geopolitical-secrets-from-middle-east-africa-and-asia</a> 2024-05-23T10:28:14Z https://yabu.me/nevent1qqs9ckt8cz2zysnw4qmd83radh0kzlxhzrmjukguz5k4jhhjdwe2g2czyru72t473fgmjr764nrnt6pz6mhrtrv3mt2qva50szhkg6mushtewxhwksz US Pumps $50M Into Better Healthcare Cyber Resilience<br/><br/>Upgrade, an ARPA-H program, will focus on automating cybersecurity for healthcare institutions so that providers can focus on patient care.<br/><br/><a href="https://www.darkreading.com/cybersecurity-operations/us-pumps-50m-into-better-healthcare-cyber-resilience">https://www.darkreading.com/cybersecurity-operations/us-pumps-50m-into-better-healthcare-cyber-resilience</a> 2024-05-22T20:25:29Z https://yabu.me/nevent1qqst2vnqex3rfjfel4mqj6ja2ppaj6yjj2aggadas2ujkqmltaqx6dqzyru72t473fgmjr764nrnt6pz6mhrtrv3mt2qva50szhkg6mushtewue05mc GitHub Authentication Bypass Opens Enterprise Server to Attackers<br/><br/>The max-severity bug affects versions using the SAML single sign-on mechanism.<br/><br/><a href="https://www.darkreading.com/vulnerabilities-threats/github-authentication-bypass-opens-enterprise-server-attackers">https://www.darkreading.com/vulnerabilities-threats/github-authentication-bypass-opens-enterprise-server-attackers</a> 2024-05-22T20:00:25Z https://yabu.me/nevent1qqsyvzmmm7rj8wjmfx3knvq97hlcg2t7dngzc0lndm852wdxwp0mulczyru72t473fgmjr764nrnt6pz6mhrtrv3mt2qva50szhkg6mushteww4ryxz Snowflake&amp;amp;apos;s Anvilogic Investment Signals Changes in SIEM Market<br/><br/>Coming on the heels of Cisco buying Splunk, Palo Alto Networks acquiring IBM&#39;s QRadar, and LogRhythm merging with Exabeam, Snowflake&#39;s investment highlights the ongoing market pressure to improve SOC ...<br/><br/><a href="https://www.darkreading.com/cybersecurity-analytics/snowflake-anvilogic-investment-sign-of-changes-siem">https://www.darkreading.com/cybersecurity-analytics/snowflake-anvilogic-investment-sign-of-changes-siem</a> 2024-05-22T19:50:33Z https://yabu.me/nevent1qqsvaddwaf7wan3xslu3wvfhf9c5qfefvmkte3dlwewegpvtj02wqdgzyru72t473fgmjr764nrnt6pz6mhrtrv3mt2qva50szhkg6mushtewv69m8a Trends at the 2024 RSA Startup Competition<br/><br/>Startups at Innovation Sandbox 2024 brought clarity to artificial intelligence, protecting data from AI, and accomplishing novel security solutions with new models.<br/><br/><a href="https://www.darkreading.com/vulnerabilities-threats/trends-at-2024-rsa-startup-competition">https://www.darkreading.com/vulnerabilities-threats/trends-at-2024-rsa-startup-competition</a> 2024-05-22T17:25:58Z https://yabu.me/nevent1qqs9z6h4wxxf465yhzdvtk27qfmy32xywkaf75jlcw7hqw72j4xv2yqzyru72t473fgmjr764nrnt6pz6mhrtrv3mt2qva50szhkg6mushtewq2d8ur Novel EDR-Killing &amp;amp;apos;GhostEngine&amp;amp;apos; Malware Is Built for Stealth<br/><br/>The previously unknown malware (aka Hidden Shovel) is a ghost in the machine: It silently attacks kernel drivers to shut down security defense systems and thus evade detection.<br/><br/><a href="https://www.darkreading.com/cyberattacks-data-breaches/novel-edr-killing-ghostengine-malware-stealth">https://www.darkreading.com/cyberattacks-data-breaches/novel-edr-killing-ghostengine-malware-stealth</a> 2024-05-22T14:25:27Z https://yabu.me/nevent1qqsd6vs0fyq5qkm62yr56a4zk07jge0n35fwxxcmvlr6j23u88ahrxgzyru72t473fgmjr764nrnt6pz6mhrtrv3mt2qva50szhkg6mushtewfkv656 Chinese &amp;amp;apos;ORB&amp;amp;apos; Networks Conceal APTs, Render Static IoCs Irrelevant<br/><br/>Mandiant warns that defenders must rethink how to thwart Chinese cyber-espionage groups now using professional &#34;infrastructure-as-a-service&#34; operational relay box networks of virtual private servers a...<br/><br/><a href="https://www.darkreading.com/cybersecurity-operations/chinese-orb-networks-conceal-apts-make-tracking-iocs-irrelevant">https://www.darkreading.com/cybersecurity-operations/chinese-orb-networks-conceal-apts-make-tracking-iocs-irrelevant</a> 2024-05-22T14:01:01Z https://yabu.me/nevent1qqsz9cpel7mduah97rntxhhws7y0d6ux0kcyqegtl3euzxer3u2emfqzyru72t473fgmjr764nrnt6pz6mhrtrv3mt2qva50szhkg6mushtewsq37wm Preparing Your Organization for Upcoming Cybersecurity Deadlines<br/><br/>Federal and state regulators have introduced new rules and mandates aimed at holding organizations accountable when it comes to cybersecurity. Here&#39;s how to get ready.<br/><br/><a href="https://www.darkreading.com/cybersecurity-operations/preparing-your-organization-upcoming-cybersecurity-deadlines">https://www.darkreading.com/cybersecurity-operations/preparing-your-organization-upcoming-cybersecurity-deadlines</a> 2024-05-22T14:00:50Z https://yabu.me/nevent1qqs2pe2fqu3rcyd8q8gfwt252pr56gnst7yw27ratevc3yu3qfwxpngzyru72t473fgmjr764nrnt6pz6mhrtrv3mt2qva50szhkg6mushtewt64u4l Critical Netflix Genie Bug Opens Big Data Orchestration to RCE<br/><br/>The severe security vulnerability (CVE-2024-4701, CVSS 9.9) gives remote attackers a way to burrow into Netflix&#39;s Genie open source platform, which is a treasure trove of information and connections t...<br/><br/><a href="https://www.darkreading.com/application-security/netflix-fixes-critical-vulnerability-on-big-data-orchestration-service">https://www.darkreading.com/application-security/netflix-fixes-critical-vulnerability-on-big-data-orchestration-service</a> 2024-05-22T13:02:59Z https://yabu.me/nevent1qqstvhlmxr55tvny45qadqxp5a842cm269r8c8gp9gagukexux3qtrgzyru72t473fgmjr764nrnt6pz6mhrtrv3mt2qva50szhkg6mushtewaudcpx Outsourcing Security Without Increasing Risk<br/><br/>Few enterprises have all the cybersecurity skills and resources they need in-house, making outsourcing a necessity. How do they select, and work with, third-party security service providers?<br/><br/><a href="https://www.darkreading.com/cybersecurity-operations/outsourcing-security-without-increasing-risk">https://www.darkreading.com/cybersecurity-operations/outsourcing-security-without-increasing-risk</a> 2024-05-22T06:51:34Z https://yabu.me/nevent1qqsfmmek2u79t5dnclwwgmdkc8cdvgmae7plmymarw8n8qpz4f3m9xczyru72t473fgmjr764nrnt6pz6mhrtrv3mt2qva50szhkg6mushtewzedw2d SAGE Cyber Launches CISO Planning Tool<br/><br/>As a newly independent company, SAGE Cyber will offer a platform that helps CISOs make data-driven decisions and optimize their security defenses.<br/><br/><a href="https://www.darkreading.com/cybersecurity-operations/sage-cyber-launches-ciso-planning-tool">https://www.darkreading.com/cybersecurity-operations/sage-cyber-launches-ciso-planning-tool</a> 2024-05-22T03:50:40Z https://yabu.me/nevent1qqs2szm67enduggk5a2xepkxahpuqaa4dnmrjsxkv540ermrgxn0n7qzyru72t473fgmjr764nrnt6pz6mhrtrv3mt2qva50szhkg6mushtewj9ztvc WitnessAI Launches With Guardrails for AI<br/><br/>AI safety platform startup WitnessAI claims to help enterprises use AI safely and effectively with its platform addressing AI privacy, governance, and security.<br/><br/><a href="https://www.darkreading.com/cloud-security/witnessai-launches-with-guardrails-for-ai">https://www.darkreading.com/cloud-security/witnessai-launches-with-guardrails-for-ai</a> 2024-05-22T03:28:17Z https://yabu.me/nevent1qqsympfpzjl0sqxl4mchyrvvevju5z8mset9aa2w7jz0x2tcny4hxlszyru72t473fgmjr764nrnt6pz6mhrtrv3mt2qva50szhkg6mushtewjj594e Picking the Right Database Tech for Cybersecurity Defense<br/><br/>Graph and streaming databases are helping defenders deal with complex, real-time threat and cybersecurity data to find weak points before attackers.<br/><br/><a href="https://www.darkreading.com/cybersecurity-analytics/picking-right-database-tech-cybersecurity-defense">https://www.darkreading.com/cybersecurity-analytics/picking-right-database-tech-cybersecurity-defense</a> 2024-05-22T02:00:23Z https://yabu.me/nevent1qqsqc6sc4ygvdc8h53ec0swrkqzsw47zsjppevcr0arhl4thgujv9mgzyru72t473fgmjr764nrnt6pz6mhrtrv3mt2qva50szhkg6mushtewywu6lw Iran APTs Tag Team Espionage, Wiper Attacks Against Israel &amp;amp;amp; Albania<br/><br/>Scarred Manticore is the smart, sophisticated one. But when Iran needs something destroyed, it hands the keys over to Void Manticore.<br/><br/><a href="https://www.darkreading.com/threat-intelligence/iran-apts-tag-team-espionage-wiper-attacks-against-israel-and-albania">https://www.darkreading.com/threat-intelligence/iran-apts-tag-team-espionage-wiper-attacks-against-israel-and-albania</a> 2024-05-21T21:25:32Z https://yabu.me/nevent1qqs99pkkmz54xkzaphtjtw08np8pldjgssmrg9xrgee966cvwtl8csgzyru72t473fgmjr764nrnt6pz6mhrtrv3mt2qva50szhkg6mushtew0xrque YouTube Becomes Latest Battlefront for Phishing, Deepfakes<br/><br/>Personalized phishing emails with fake collaboration opportunities and compromised video descriptions linking to malware are just some of the new tricks.<br/><br/><a href="https://www.darkreading.com/vulnerabilities-threats/youtube-becomes-latest-frontier-for-phishing-deepfakes">https://www.darkreading.com/vulnerabilities-threats/youtube-becomes-latest-frontier-for-phishing-deepfakes</a> 2024-05-21T21:00:15Z https://yabu.me/nevent1qqsfekn5xk7axsz6787nfhav5nd3w0pthp57k7r5yplwkw6vlxpn59czyru72t473fgmjr764nrnt6pz6mhrtrv3mt2qva50szhkg6mushtew4kk8jd EPA Puts Teeth Into Water Sector Cyber Efforts<br/><br/>The agency plans to get more serious about enforcement as Iran and Russia step up the volume of cyberattacks on water systems nationwide.<br/><br/><a href="https://www.darkreading.com/ics-ot-security/epa-water-sector-cyber-efforts">https://www.darkreading.com/ics-ot-security/epa-water-sector-cyber-efforts</a> 2024-05-21T17:50:23Z https://yabu.me/nevent1qqsg7xg2qp7nxwcznm609eskjjueq96trf9x6lz8h8hn7resv9z72qczyru72t473fgmjr764nrnt6pz6mhrtrv3mt2qva50szhkg6mushtewrm2hl8 Name That Toon: Buzz Kill<br/><br/>Feeling creative? Submit your caption and our panel of experts will reward the winner with a $25 Amazon gift card.<br/><br/><a href="https://www.darkreading.com/cyberattacks-data-breaches/name-that-toon-buzz-kill">https://www.darkreading.com/cyberattacks-data-breaches/name-that-toon-buzz-kill</a> 2024-05-21T17:25:27Z https://yabu.me/nevent1qqs8658dan4jrp78h0d9hwlf37r2zay5zafztna0t48nk7atqchyy5gzyru72t473fgmjr764nrnt6pz6mhrtrv3mt2qva50szhkg6mushtewsaca47 Russia&amp;amp;apos;s Turla APT Abuses MSBuild to Deliver TinyTurla Backdoor<br/><br/>A threat campaign luring users with malicious documents related to human rights and public notices is aimed at giving the Russia-backed threat group access to victims&#39; systems for cyber-espionage purp...<br/><br/><a href="https://www.darkreading.com/cyberattacks-data-breaches/russia-turla-apt-msbuild-tinyturla-backdoor">https://www.darkreading.com/cyberattacks-data-breaches/russia-turla-apt-msbuild-tinyturla-backdoor</a> 2024-05-21T14:50:38Z https://yabu.me/nevent1qqs82xhjsz4wc90ha53tgmja6sa0jcy5gmwtrh3esjwh0r83y9kw3rgzyru72t473fgmjr764nrnt6pz6mhrtrv3mt2qva50szhkg6mushtewacc5z6 Can Cybersecurity Be a Unifying Factor in Digital Trade Negotiations?<br/><br/>As we face continued headwinds on provisions like data flows and e-customs duties, further progress is both needed and achievable in digital trade policy.<br/><br/><a href="https://www.darkreading.com/cybersecurity-operations/can-cybersecurity-be-unifying-factor-in-digital-trade-negotiations-">https://www.darkreading.com/cybersecurity-operations/can-cybersecurity-be-unifying-factor-in-digital-trade-negotiations-</a> 2024-05-21T14:25:17Z https://yabu.me/nevent1qqsgqv70ryj3efc9yvu9z2jp7fyajk6phh70lvjd2a58s7hjdhd2rpqzyru72t473fgmjr764nrnt6pz6mhrtrv3mt2qva50szhkg6mushtewjg7n7t Transforming CISOs into Storytellers<br/><br/>Faced with chilling new SEC rules, chief information security officers are learning soft skills to help them better communicate cybersecurity concerns with the C-suite.<br/><br/><a href="https://www.darkreading.com/cyber-risk/transforming-cisos-into-storytellers">https://www.darkreading.com/cyber-risk/transforming-cisos-into-storytellers</a> 2024-05-21T12:25:51Z https://yabu.me/nevent1qqs8k7jr2a5zym3u4sdzx3agkxwxhn0cgsg5v9sdh6jchue3fftr7fqzyru72t473fgmjr764nrnt6pz6mhrtrv3mt2qva50szhkg6mushtewzeq0he OpenSSF Siren to Share Threat Intelligence for Open Source Software<br/><br/>The Siren email mailing list will focus on operational impact and response and act as a central location to provide information about threats and necessary post-disclosure activities.<br/><br/><a href="https://www.darkreading.com/application-security/openssf-siren-to-share-threat-intelligence-for-open-source-software">https://www.darkreading.com/application-security/openssf-siren-to-share-threat-intelligence-for-open-source-software</a> 2024-05-21T12:00:59Z https://yabu.me/nevent1qqsgkz9fast0tr6jmfjrzes4y7mm36lapvhmtf7e78h38wx85hxq8vczyru72t473fgmjr764nrnt6pz6mhrtrv3mt2qva50szhkg6mushtewedcpt5 DoJ Shakes Up North Korea&amp;amp;apos;s Widespread IT Freelance Scam Operation<br/><br/>Fraudsters based in the US and Europe indicted for helping North Korea&#39;s nation-state groups establish fake freelancer identities and evade sanctions.<br/><br/><a href="https://www.darkreading.com/vulnerabilities-threats/doj-targets-north-koreas-widespread-it-freelance-scam-operation">https://www.darkreading.com/vulnerabilities-threats/doj-targets-north-koreas-widespread-it-freelance-scam-operation</a> 2024-05-21T00:00:54Z https://yabu.me/nevent1qqsd4tvq9h5dl7the8fwzxzmmqv0ey4x37yqs6gyqsmktayzj3z8lpgzyru72t473fgmjr764nrnt6pz6mhrtrv3mt2qva50szhkg6mushtewlx6v5f Google Pitches Workspace as Microsoft Email Alternative, Citing CSRB Report<br/><br/>The new Secure Alternative Program from Google aims to entice customers away from Exchange Online and break Microsoft&#39;s dominance in enterprise.<br/><br/><a href="https://www.darkreading.com/application-security/google-pitches-workspace-as-more-secure-option-to-microsoft-email-citing-csrb-report">https://www.darkreading.com/application-security/google-pitches-workspace-as-more-secure-option-to-microsoft-email-citing-csrb-report</a> 2024-05-20T22:25:31Z https://yabu.me/nevent1qqsdnz58rhnaadt02euxfq0swwzust274je64uv5336jkq4stcd8zaczyru72t473fgmjr764nrnt6pz6mhrtrv3mt2qva50szhkg6mushtewyts5g4 CyberArk Picks Up Machine Identity Manager Venafi For $1.54B<br/><br/>The acquisition gives CyberArk new IoT identity and certificate lifecycle management, cryptographic code-signing, and other services to secure the enterprise cloud.<br/><br/><a href="https://www.darkreading.com/cloud-security/cyberark-picks-up-machine-id-manager-venafi-for-1-54b">https://www.darkreading.com/cloud-security/cyberark-picks-up-machine-id-manager-venafi-for-1-54b</a> 2024-05-20T21:25:56Z https://yabu.me/nevent1qqs2la08wg5xqgkstm075psl823wfa67c7y3qfqc2tjx5zkaxms8u7szyru72t473fgmjr764nrnt6pz6mhrtrv3mt2qva50szhkg6mushtewc7st6x ZeroRisk Cybersecurity Expands Global Presence With US Launch<br/><br/><a href="https://www.darkreading.com/cyber-risk/zerorisk-cybersecurity-expands-global-presence-with-us-launch">https://www.darkreading.com/cyber-risk/zerorisk-cybersecurity-expands-global-presence-with-us-launch</a> 2024-05-20T20:25:47Z https://yabu.me/nevent1qqsfzl34nln7k0mw4y732j6wnrk8vldtdrkppmamn6ncedngj232sgszyru72t473fgmjr764nrnt6pz6mhrtrv3mt2qva50szhkg6mushteweaxwjs Deepfakes Rank As the Second Most Common Cybersecurity Incident for US Businesses<br/><br/><a href="https://www.darkreading.com/cyberattacks-data-breaches/deepfakes-rank-as-the-second-most-common-cybersecurity-incident-for-us-businesses">https://www.darkreading.com/cyberattacks-data-breaches/deepfakes-rank-as-the-second-most-common-cybersecurity-incident-for-us-businesses</a> 2024-05-20T20:25:39Z https://yabu.me/nevent1qqsfy45x2l823vf9s8s0q834p3d7nx7fzths5kjzs6uwyv94gefhm2gzyru72t473fgmjr764nrnt6pz6mhrtrv3mt2qva50szhkg6mushtew5c59sj Data Breach Response Provider, CyEx, Acquires Settlement Administrator, Simpluris Inc.<br/><br/><a href="https://www.darkreading.com/cyberattacks-data-breaches/data-breach-response-provider-cyex-acquires-settlement-administrator-simpluris-inc-">https://www.darkreading.com/cyberattacks-data-breaches/data-breach-response-provider-cyex-acquires-settlement-administrator-simpluris-inc-</a> 2024-05-20T20:25:31Z https://yabu.me/nevent1qqs88wlr06cdcn0zeyfz8se6036q7mc5swwaf2llpgfugqudpvh988czyru72t473fgmjr764nrnt6pz6mhrtrv3mt2qva50szhkg6mushtewl8jdty HP Catches Cybercriminals &amp;amp;apos;Cat-Phishing&amp;amp;apos; Users<br/><br/><a href="https://www.darkreading.com/vulnerabilities-threats/hp-catches-cybercriminals-cat-phishing-users">https://www.darkreading.com/vulnerabilities-threats/hp-catches-cybercriminals-cat-phishing-users</a> 2024-05-20T20:25:23Z https://yabu.me/nevent1qqsyr2u8s47u9t4hc8gf3k677863u578rlc8f3np65atzkyzrwnalkqzyru72t473fgmjr764nrnt6pz6mhrtrv3mt2qva50szhkg6mushtewkd78a9 Critical Bug Allows DoS, RCE, Data Leaks in All Major Cloud Platforms<br/><br/>An on-by-default endpoint in ubiquitous logging service Fluent Bit contains an oversight that hackers can toy with to rattle most any cloud environment.<br/><br/><a href="https://www.darkreading.com/cloud-security/critical-bug-dos-rce-data-leaks-in-all-major-cloud-platforms">https://www.darkreading.com/cloud-security/critical-bug-dos-rce-data-leaks-in-all-major-cloud-platforms</a> 2024-05-20T20:00:31Z https://yabu.me/nevent1qqsq7kapygu6wrttkvjszjmxtntzj0qha8vgyp6y9j08xu8wt972azgzyru72t473fgmjr764nrnt6pz6mhrtrv3mt2qva50szhkg6mushtew9fgkrk NRECA Receives $4M in DOE Funding to Boost Electric Co-op Cybersecurity Preparedness<br/><br/><a href="https://www.darkreading.com/ics-ot-security/nreca-receives-4m-in-doe-funding-to-boost-electric-co-op-cybersecurity-preparedness">https://www.darkreading.com/ics-ot-security/nreca-receives-4m-in-doe-funding-to-boost-electric-co-op-cybersecurity-preparedness</a> 2024-05-20T20:00:23Z https://yabu.me/nevent1qqs90rf4k4rr0egcl0rcepr7m8tq72t6mysxatce6vn4nkk55zp2z8qzyru72t473fgmjr764nrnt6pz6mhrtrv3mt2qva50szhkg6mushtewry7rnl Students Spot Washing Machine App Flaw That Gives Out Free Cycles<br/><br/>UCSC students say that after reporting the bug months ago they&#39;re still able to rack up unlimited free wash loads at their local laundromat.<br/><br/><a href="https://www.darkreading.com/ics-ot-security/students-spot-washing-machine-app-flaw-that-gives-out-free-cycles">https://www.darkreading.com/ics-ot-security/students-spot-washing-machine-app-flaw-that-gives-out-free-cycles</a> 2024-05-20T19:50:38Z https://yabu.me/nevent1qqstmy4273msfuwca8vrd2lqltu546heq9h7ndj6tj4x93p73mztdkqzyru72t473fgmjr764nrnt6pz6mhrtrv3mt2qva50szhkg6mushtew3lgh3v What American Enterprises Can Learn From Europe&amp;amp;apos;s GDPR Mistakes<br/><br/>As the US braces for a data privacy overhaul, companies need to update data practices, train staff, and ensuring compliance from the outset to avoid Europe&#39;s costly missteps.<br/><br/><a href="https://www.darkreading.com/cyber-risk/what-american-enterprises-can-learn-from-europe-gdpr-mistakes">https://www.darkreading.com/cyber-risk/what-american-enterprises-can-learn-from-europe-gdpr-mistakes</a> 2024-05-20T14:50:47Z https://yabu.me/nevent1qqsdxklwjxfxdp2xy52h9mk5gmc0ux4aqe3e4ne6ennke5s9qmnvjwszyru72t473fgmjr764nrnt6pz6mhrtrv3mt2qva50szhkg6mushtewmsfe2p Android Banking Trojan Antidot Disguised as Google Play Update<br/><br/>Antidot uses overlay attacks and keylogging to target users&#39; financial data.<br/><br/><a href="https://www.darkreading.com/endpoint-security/android-banking-trojan-antidot-disguised-as-google-play-update">https://www.darkreading.com/endpoint-security/android-banking-trojan-antidot-disguised-as-google-play-update</a> 2024-05-20T13:26:55Z https://yabu.me/nevent1qqsree8jazhc5ja73x7eckdzf952qqr6ghvfy795ca0m0nc6a5hrjngzyru72t473fgmjr764nrnt6pz6mhrtrv3mt2qva50szhkg6mushtewh4yz48 CISOs Grapple With IBM&amp;amp;apos;s Unexpected Cybersecurity Software Exit<br/><br/>IBM&#39;s abrupt divestiture of QRadar SaaS underscores the consolidation of SIEM, XDR, and AI technologies into unified platforms.<br/><br/><a href="https://www.darkreading.com/cybersecurity-analytics/ciso-grapple-with-ibm-unexpected-cybersecurity-software-exit">https://www.darkreading.com/cybersecurity-analytics/ciso-grapple-with-ibm-unexpected-cybersecurity-software-exit</a> 2024-05-17T22:25:24Z https://yabu.me/nevent1qqsfxj8hz20acsmm9plzflqxe5js62kq3q3htt29c3k8qtmpepcpagszyru72t473fgmjr764nrnt6pz6mhrtrv3mt2qva50szhkg6mushtewz3lfp8 CISO Corner: What Cyber Labor Shortage?; Trouble Meeting SEC Disclosure Deadlines<br/><br/>Our collection of the most relevant reporting and industry perspectives for those guiding cybersecurity strategies and focused on SecOps. Also included: DR&#39;s podcast on the CISO &amp; the SEC; breaking do...<br/><br/><a href="https://www.darkreading.com/cybersecurity-operations/ciso-corner-cyber-labor-shortage-trouble-meeting-sec-disclosure-deadlines">https://www.darkreading.com/cybersecurity-operations/ciso-corner-cyber-labor-shortage-trouble-meeting-sec-disclosure-deadlines</a> 2024-05-17T21:25:17Z https://yabu.me/nevent1qqs0c4826xjqgga73pq5kdwfj59277l0429vxew5syt5wprr5cfuylczyru72t473fgmjr764nrnt6pz6mhrtrv3mt2qva50szhkg6mushteww5j72r Intel Discloses Max Severity Bug in Its AI Model Compression Software<br/><br/>The improper input validation issue in Intel Neural Compressor enables remote attackers to execute arbitrary code on affected systems.<br/><br/><a href="https://www.darkreading.com/cyber-risk/intel-discloses-max-severity-bug-in-its-ai-model-compression-software">https://www.darkreading.com/cyber-risk/intel-discloses-max-severity-bug-in-its-ai-model-compression-software</a> 2024-05-17T20:00:21Z https://yabu.me/nevent1qqspxpfhx9ydlqk3epjg74lz5h3h6e0cvpc807dux8u2uuyuafgu4xszyru72t473fgmjr764nrnt6pz6mhrtrv3mt2qva50szhkg6mushtewfzga67 10 Ways a Digital Shield Protects Apps and APIs<br/><br/>Layers of protection can bring defense-in-depth practices to distributed clouds and other modern network architectures.<br/><br/><a href="https://www.darkreading.com/cloud-security/10-ways-a-digital-shield-protects-apps-and-apis-in-a-distributed-cloud-world">https://www.darkreading.com/cloud-security/10-ways-a-digital-shield-protects-apps-and-apis-in-a-distributed-cloud-world</a> 2024-05-17T19:00:36Z https://yabu.me/nevent1qqs9y0kup7acyt5y69r472merqaee0t8rdg4rgkp08gu8rggnackr5qzyru72t473fgmjr764nrnt6pz6mhrtrv3mt2qva50szhkg6mushtewcm5v7r SEC Adds New Incident Response Rules for Financial Sector<br/><br/>Financial firms covered under new regulations will be required to establish a clear response and communications plan for customer data breaches.<br/><br/><a href="https://www.darkreading.com/cyber-risk/sec-adds-new-incident-response-rules-for-financial-sector">https://www.darkreading.com/cyber-risk/sec-adds-new-incident-response-rules-for-financial-sector</a> 2024-05-17T18:25:43Z https://yabu.me/nevent1qqs249jhmfv4m458lmp0mm8vp0k584y62qkp65c3q0xmerv25f8r3yszyru72t473fgmjr764nrnt6pz6mhrtrv3mt2qva50szhkg6mushtewvxvy5h 400K Linux Servers Recruited by Resurrected Ebury Botnet<br/><br/>Cryptocurrency theft and financial fraud are the new M.O. of the 15-year-old malware operation that has hit organizations around the globe.<br/><br/><a href="https://www.darkreading.com/threat-intelligence/400k-linux-servers-recruited-by-resurrected-ebury-botnet">https://www.darkreading.com/threat-intelligence/400k-linux-servers-recruited-by-resurrected-ebury-botnet</a> 2024-05-17T16:00:45Z https://yabu.me/nevent1qqsvwawkc8ye4cz4522zx66h9mt6nrcp3tdx0edspxx9unz33k8en5szyru72t473fgmjr764nrnt6pz6mhrtrv3mt2qva50szhkg6mushtews3kmem CISOs and Their Companies Struggle to Comply With SEC Disclosure Rules<br/><br/>Most companies still can&#39;t determine whether a breach is material within the four days mandated by the SEC, skewing incident response.<br/><br/><a href="https://www.darkreading.com/cybersecurity-operations/cisos-and-their-companies-struggle-to-comply-with-sec-disclosure-rules">https://www.darkreading.com/cybersecurity-operations/cisos-and-their-companies-struggle-to-comply-with-sec-disclosure-rules</a> 2024-05-17T14:00:55Z https://yabu.me/nevent1qqsgzwksv4tsjqsepe4pcq8uph9uc4cpe78e8vjguzkjauxp7teeq8czyru72t473fgmjr764nrnt6pz6mhrtrv3mt2qva50szhkg6mushtew24ate6 Whose Data Is It Anyway? Equitable Access in Cybersecurity<br/><br/>Cybersecurity cannot be solely about defending against threats; it must also empower organizations with their data.<br/><br/><a href="https://www.darkreading.com/cybersecurity-operations/whose-data-is-it-anyway-equitable-access-in-cybersecurity">https://www.darkreading.com/cybersecurity-operations/whose-data-is-it-anyway-equitable-access-in-cybersecurity</a> 2024-05-17T14:00:46Z https://yabu.me/nevent1qqsprdxkjq8rcexf4ck4000z4p8qch07jre3x4hdme9aare5t4t5yygzyru72t473fgmjr764nrnt6pz6mhrtrv3mt2qva50szhkg6mushtewug2q6h Microsoft Has Yet to Patch 7 Pwn2Own Zero-Days<br/><br/>A number of serious Windows bugs still haven&#39;t made their way into criminal circles, but that won&#39;t remain the case forever — and time is running short before ZDI releases exploit details.<br/><br/><a href="https://www.darkreading.com/vulnerabilities-threats/microsoft-has-yet-to-patch-7-pwn2own-zero-days">https://www.darkreading.com/vulnerabilities-threats/microsoft-has-yet-to-patch-7-pwn2own-zero-days</a> 2024-05-17T12:01:48Z https://yabu.me/nevent1qqsr8p0qzmmv2d6rzxzu8xcnhuufng8vc33qykjlecsdktfefhwrqlqzyru72t473fgmjr764nrnt6pz6mhrtrv3mt2qva50szhkg6mushtewymwxgn There Is No Cyber Labor Shortage<br/><br/>There are plenty of valuable candidates on the market. Hiring managers are simply looking in the wrong places.<br/><br/><a href="https://www.darkreading.com/cybersecurity-operations/no-cyber-labor-shortage">https://www.darkreading.com/cybersecurity-operations/no-cyber-labor-shortage</a> 2024-05-16T21:50:48Z https://yabu.me/nevent1qqsyv7nt6mfl4dwrrt7a4qja8t09ylq674pcsdles9d0jhtkt30ymmgzyru72t473fgmjr764nrnt6pz6mhrtrv3mt2qva50szhkg6mushtewr0czla Addressing the Cybersecurity Vendor Ecosystem Disconnect<br/><br/>How security teams can bridge the gap between short-term profits and long-term business needs.<br/><br/><a href="https://www.darkreading.com/endpoint-security/addressing-the-cybersecurity-vendor-ecosystem-disconnect">https://www.darkreading.com/endpoint-security/addressing-the-cybersecurity-vendor-ecosystem-disconnect</a> 2024-05-16T21:50:40Z https://yabu.me/nevent1qqswfjs3ffzxm4a0kthrlcny2zap525w6359237e6tj4z20yr36ecwqzyru72t473fgmjr764nrnt6pz6mhrtrv3mt2qva50szhkg6mushtewxxdn97 Santander Falls Victim to Data Breach Involving Third-Party Provider<br/><br/>The company reports that customers based in Chile, Spain, and Uruguay were the primary victims of the breach, alongside some former employees of the global bank.<br/><br/><a href="https://www.darkreading.com/cyberattacks-data-breaches/santander-falls-victim-to-data-breach-involving-third-party-provider">https://www.darkreading.com/cyberattacks-data-breaches/santander-falls-victim-to-data-breach-involving-third-party-provider</a> 2024-05-16T21:25:40Z https://yabu.me/nevent1qqsxs9h7wgxeajhghdpef6ea2927g5vdavua4yz3kd5spre9v5yeaeqzyru72t473fgmjr764nrnt6pz6mhrtrv3mt2qva50szhkg6mushtewg5e3yy US AI Experts Targeted in SugarGh0st RAT Campaign<br/><br/>Researchers believe the attacker is likely China-affiliated, since a previous version of the malware was used by a China nation-state attack group.<br/><br/><a href="https://www.darkreading.com/cyberattacks-data-breaches/us-ai-experts-targeted-in-sugargh0st-rat-campaign">https://www.darkreading.com/cyberattacks-data-breaches/us-ai-experts-targeted-in-sugargh0st-rat-campaign</a> 2024-05-16T20:26:05Z https://yabu.me/nevent1qqs9jsxzvtmu5laqduh93famheqnd8kw9jqx5207srksye389e8hrzqzyru72t473fgmjr764nrnt6pz6mhrtrv3mt2qva50szhkg6mushtewsu94dc GE Ultrasound Gear Riddled With Bugs, Open to Ransomware &amp;amp;amp; Data Theft<br/><br/>Thankfully, GE ultrasounds aren&#39;t Internet-facing. Exploiting most of the bugs to cause serious damage to patients would require physical device access.<br/><br/><a href="https://www.darkreading.com/vulnerabilities-threats/ge-ultrasound-gear-riddled-with-bugs-open-to-ransomware-data-theft">https://www.darkreading.com/vulnerabilities-threats/ge-ultrasound-gear-riddled-with-bugs-open-to-ransomware-data-theft</a> 2024-05-16T19:50:57Z https://yabu.me/nevent1qqs9ukl42dvz5ejfmgn36ua5h5t4uc34dxsg696lluyl0pmdz4m2vzszyru72t473fgmjr764nrnt6pz6mhrtrv3mt2qva50szhkg6mushtewsk7uy3 Asian Threat Actors Use New Techniques to Attack Familiar Targets<br/><br/>Generative AI and software supply chain attacks are being exploited to disrupt, manipulate, and steal.<br/><br/><a href="https://www.darkreading.com/cyberattacks-data-breaches/asian-threat-actors-use-new-techniques-to-attack-familiar-targets">https://www.darkreading.com/cyberattacks-data-breaches/asian-threat-actors-use-new-techniques-to-attack-familiar-targets</a> 2024-05-16T19:50:49Z https://yabu.me/nevent1qqszvfc22m775l4u36dm665wqf0c7u7k820572flm5tw0c2el4667vszyru72t473fgmjr764nrnt6pz6mhrtrv3mt2qva50szhkg6mushtewk3ucuh FCC Reveals &#39;Royal Tiger&#39; Robocall Campaign<br/><br/>In a first-ever move, the commission&#39;s enforcement bureau has high hopes that official classification will allow law enforcement partners to better combat these kinds of threats.<br/><br/><a href="https://www.darkreading.com/vulnerabilities-threats/fcc-deems-royal-tiger-robocall-campaign-a-communications-threat">https://www.darkreading.com/vulnerabilities-threats/fcc-deems-royal-tiger-robocall-campaign-a-communications-threat</a> 2024-05-16T14:52:42Z https://yabu.me/nevent1qqsg39uxafp6wt8dx48ql3j5qgq494ks2tefzdwlfej47fre7yqukkczyru72t473fgmjr764nrnt6pz6mhrtrv3mt2qva50szhkg6mushtewwleces The Fall of the National Vulnerability Database<br/><br/>Since its inception, three key factors have affected the NVD&#39;s ability to classify security concerns — and what we&#39;re experiencing now is the result.<br/><br/><a href="https://www.darkreading.com/vulnerabilities-threats/fall-of-national-vulnerability-database">https://www.darkreading.com/vulnerabilities-threats/fall-of-national-vulnerability-database</a> 2024-05-16T14:26:43Z https://yabu.me/nevent1qqs803mx6l9j9nufcqd5j7xak47ysufcqatawk4vt5f9z8j6hrctvhszyru72t473fgmjr764nrnt6pz6mhrtrv3mt2qva50szhkg6mushtew3xkevd Windows Quick Assist Anchors Black Basta Ransomware Gambit<br/><br/>When abused by threat actors with sophisticated social-engineering chops, remote-access tools demand that enterprises remain sharp in both defense strategy and employee-awareness training.<br/><br/><a href="https://www.darkreading.com/threat-intelligence/windows-quick-assist-anchors-black-basta-ransomware">https://www.darkreading.com/threat-intelligence/windows-quick-assist-anchors-black-basta-ransomware</a> 2024-05-16T13:51:17Z https://yabu.me/nevent1qqspekwd5ewcx93gyd2g2ep6s52vlcapj3hkaxyv6ucshdc9ct6ppsqzyru72t473fgmjr764nrnt6pz6mhrtrv3mt2qva50szhkg6mushtew9z09wu Google&#39;s AI Watermarks Will Identify Deepfakes<br/><br/>The SynthID line of watermarking techniques can be used to identify AI-generated images, video, and text.<br/><br/><a href="https://www.darkreading.com/cloud-security/google-ai-watermarks-identify-deepfakes">https://www.darkreading.com/cloud-security/google-ai-watermarks-identify-deepfakes</a> 2024-05-16T12:52:24Z https://yabu.me/nevent1qqsgel22xvrkh9f9rw0vzn30ajvpzep7y658htdrkwngdlxxmxnp58gzyru72t473fgmjr764nrnt6pz6mhrtrv3mt2qva50szhkg6mushtew9qhr06 Patch Now: Another Google Zero-Day Under Exploit in the Wild<br/><br/>Google has rolled an emergency patch for CVE-2024-4947, the third Chrome zero-day it&#39;s addressed in the past week.<br/><br/><a href="https://www.darkreading.com/vulnerabilities-threats/patch-now-google-zero-day-exploit">https://www.darkreading.com/vulnerabilities-threats/patch-now-google-zero-day-exploit</a> 2024-05-16T12:52:16Z https://yabu.me/nevent1qqsvn85et9nrvg2vcdpzyc2evnyzgymhhq0563mucy8lz2ayw8klfcczyru72t473fgmjr764nrnt6pz6mhrtrv3mt2qva50szhkg6mushtewrvljsk Nigeria Halts Cybersecurity Tax After Public Outrage<br/><br/>In the midst of an economy struggling with soaring inflation, the Nigerian government paused plans to place a levy on domestic transactions that was aimed at enhancing cybersecurity.<br/><br/><a href="https://www.darkreading.com/cyber-risk/nigeria-halts-cybersecurity-tax-after-public-outrage">https://www.darkreading.com/cyber-risk/nigeria-halts-cybersecurity-tax-after-public-outrage</a> 2024-05-16T08:00:59Z https://yabu.me/nevent1qqsvgu6ejg62j3uq0a38kk4syyrmpf3uq74c0rfv5dv7lacvv69phvszyru72t473fgmjr764nrnt6pz6mhrtrv3mt2qva50szhkg6mushtewp870yj Palo Alto Networks and IBM to Jointly Provide AI-Powered Security Offerings<br/><br/><a href="https://www.darkreading.com/cybersecurity-operations/palo-alto-networks-and-ibm-to-jointly-provide-ai-powered-security-offerings">https://www.darkreading.com/cybersecurity-operations/palo-alto-networks-and-ibm-to-jointly-provide-ai-powered-security-offerings</a> 2024-05-15T21:50:40Z https://yabu.me/nevent1qqsvsphgy5nlmjv0x25msn8y28qu7yyx0jep5tp63tl67efwfma8faczyru72t473fgmjr764nrnt6pz6mhrtrv3mt2qva50szhkg6mushtewd3ttd0 Flaw in Wi-Fi Standard Can Enable SSID Confusion Attacks<br/><br/>Attackers can exploit the issue to trick users into connecting to insecure networks, but it works only under specific conditions.<br/><br/><a href="https://www.darkreading.com/endpoint-security/flaw-in-wi-fi-standard-can-enable-ssid-confusion-attacks">https://www.darkreading.com/endpoint-security/flaw-in-wi-fi-standard-can-enable-ssid-confusion-attacks</a> 2024-05-15T21:50:31Z https://yabu.me/nevent1qqsz3jrfk7xu5kk0yd2r4ez0kcfes3v6q6hz7q5cfsj4nya3huk00mszyru72t473fgmjr764nrnt6pz6mhrtrv3mt2qva50szhkg6mushtew2u3rpx Alkira Raises $100M in Series C Funding to Simplify, Secure and Scale Critical Network Infrastructure<br/><br/><a href="https://www.darkreading.com/cybersecurity-operations/alkira-raises-100m-in-series-c-funding-to-simplify-secure-and-scale-critical-network-infrastructure">https://www.darkreading.com/cybersecurity-operations/alkira-raises-100m-in-series-c-funding-to-simplify-secure-and-scale-critical-network-infrastructure</a> 2024-05-15T21:25:30Z https://yabu.me/nevent1qqswh8ngtsjsxgmdczf2m2y6s6yzecehqaqsn8ygrm78zgcvg2pglhqzyru72t473fgmjr764nrnt6pz6mhrtrv3mt2qva50szhkg6mushtewv8a362 Notice of a Data Breach<br/><br/><a href="https://www.darkreading.com/cyberattacks-data-breaches/notice-of-a-data-breach">https://www.darkreading.com/cyberattacks-data-breaches/notice-of-a-data-breach</a> 2024-05-15T21:25:21Z https://yabu.me/nevent1qqsgd84kf4ynqpt38g5kvydc7qgkc4huw99hd76d2v5sj4gvvrlc2hczyru72t473fgmjr764nrnt6pz6mhrtrv3mt2qva50szhkg6mushtewkr0frm FBI, DoJ Shut Down BreachForums, Launch Investigation<br/><br/>Instead of online contraband, the website now asks anyone with information that could help with the investigation to contact authorities.<br/><br/><a href="https://www.darkreading.com/threat-intelligence/fbi-doj-shut-down-breachforums-launch-investigation">https://www.darkreading.com/threat-intelligence/fbi-doj-shut-down-breachforums-launch-investigation</a> 2024-05-15T20:50:50Z https://yabu.me/nevent1qqs9kkh7q9fs6lg8mdccxnwsglmjex8qp5l75ff8z3a0mwmqjt0wh9qzyru72t473fgmjr764nrnt6pz6mhrtrv3mt2qva50szhkg6mushtewwkdxq7 Scammers Fake DocuSign Templates to Blackmail &amp;amp; Steal From Companies<br/><br/>Cybercriminals are trafficking DocuSign assets that allow for easy extortion and business email compromise.<br/><br/><a href="https://www.darkreading.com/threat-intelligence/scammers-fake-docusign-templates-blackmail-steal-companies">https://www.darkreading.com/threat-intelligence/scammers-fake-docusign-templates-blackmail-steal-companies</a> 2024-05-15T20:50:42Z https://yabu.me/nevent1qqsyjna6harpd3mx6dxudaljkycmkljmf6j8dxv75g32x8ag97etcxgzyru72t473fgmjr764nrnt6pz6mhrtrv3mt2qva50szhkg6mushtewqgfjma D-Link Routers Vulnerable to Takeover Via Exploit for Zero-Day<br/><br/>A vulnerability in the HNAP login request protocol that affects a family of devices gives unauthenticated users root access for command execution.<br/><br/><a href="https://www.darkreading.com/vulnerabilities-threats/d-link-routers-vulnerable-to-takeover-via-exploit-for-zero-day">https://www.darkreading.com/vulnerabilities-threats/d-link-routers-vulnerable-to-takeover-via-exploit-for-zero-day</a> 2024-05-15T15:51:15Z https://yabu.me/nevent1qqsw4kmrr4ut7pde8umpxhe5gkdwwtjh79pnudarnak3aj9sakzlyuqzyru72t473fgmjr764nrnt6pz6mhrtrv3mt2qva50szhkg6mushtewr8fr6w 3 Tips for Becoming the Champion of Your Organization&#39;s AI Committee<br/><br/>CISOs are now considered part of the organizational executive leadership and have both the responsibility and the opportunity to drive not just security but business success.<br/><br/><a href="https://www.darkreading.com/cybersecurity-operations/3-tips-for-becoming-champion-of-your-organization-ai-committee">https://www.darkreading.com/cybersecurity-operations/3-tips-for-becoming-champion-of-your-organization-ai-committee</a> 2024-05-15T14:01:37Z https://yabu.me/nevent1qqsyg2l0k5uyvl3wra49hfrh2lykyy754vkt26e3dsytnhyzwq7vxsczyru72t473fgmjr764nrnt6pz6mhrtrv3mt2qva50szhkg6mushtewue93pa Top 5 Most Dangerous Cyber Threats in 2024<br/><br/>SANS Institute experts weigh in on the top threat vectors faced by enterprises and the public at large.<br/><br/><a href="https://www.darkreading.com/cyber-risk/top-5-most-dangerous-cyber-threats-in-2024">https://www.darkreading.com/cyber-risk/top-5-most-dangerous-cyber-threats-in-2024</a> 2024-05-15T03:26:29Z https://yabu.me/nevent1qqsd782k87mx04753rzdajh32dupktkq0yxwgvn54le7wxxd0jf5azqzyru72t473fgmjr764nrnt6pz6mhrtrv3mt2qva50szhkg6mushtewm8r74q Singapore Cybersecurity Update Puts Cloud Providers on Notice<br/><br/>The nation amends its Cybersecurity Act, giving its primary cybersecurity agency more power to regulate critical infrastructure and third parties, and requiring cyber incidents be reported.<br/><br/><a href="https://www.darkreading.com/cyber-risk/singapore-cybersecurity-update-puts-cloud-providers-on-notice">https://www.darkreading.com/cyber-risk/singapore-cybersecurity-update-puts-cloud-providers-on-notice</a> 2024-05-15T01:01:33Z https://yabu.me/nevent1qqsf7gqa26wtep3x5mdux66tcjmzasfflzdugwqe53q6ze7vny7sxpgzyru72t473fgmjr764nrnt6pz6mhrtrv3mt2qva50szhkg6mushtewt9k6qv Microsoft Windows DWM Zero-Day Poised for Mass Exploit<br/><br/>CVE-2024-30051, under active exploit, is the most concerning out of this month&#39;s Patch Tuesday offerings, and already being abused by several QakBot actors.<br/><br/><a href="https://www.darkreading.com/vulnerabilities-threats/microsoft-windows-dwm-zero-day-mass-exploit">https://www.darkreading.com/vulnerabilities-threats/microsoft-windows-dwm-zero-day-mass-exploit</a> 2024-05-14T22:51:06Z https://yabu.me/nevent1qqst6zxfy2u8xeqg2s55j7vptrgtqkyvsa7n7nvzwpngt44u8cjsglgzyru72t473fgmjr764nrnt6pz6mhrtrv3mt2qva50szhkg6mushtewtsymt6 Unprotected Session Tokens Can Undermine FIDO2 Security<br/><br/>While the protocol has made passwordless authentication a reality, token-binding is key to prevent against token theft and reuse, security vendor says.<br/><br/><a href="https://www.darkreading.com/identity-access-management-security/unprotected-session-tokens-can-undermine-fido2-security">https://www.darkreading.com/identity-access-management-security/unprotected-session-tokens-can-undermine-fido2-security</a> 2024-05-14T21:50:34Z https://yabu.me/nevent1qqsfhfnzurnkek5ah6m04xj5j8qvf64zg2t2ngdp38rcjycvn933h0gzyru72t473fgmjr764nrnt6pz6mhrtrv3mt2qva50szhkg6mushtew3aztpv As the FBI Closes In, Scattered Spider Attacks Finance, Insurance Orgs<br/><br/>Scattered Spider is as active as ever, despite authorities claiming that they&#39;re close to nailing its members.<br/><br/><a href="https://www.darkreading.com/threat-intelligence/fbi-closes-in-scattered-spider-attacks-finance-insurance-orgs">https://www.darkreading.com/threat-intelligence/fbi-closes-in-scattered-spider-attacks-finance-insurance-orgs</a> 2024-05-14T20:50:48Z https://yabu.me/nevent1qqswr376n9rz5ykf0t4zpstfu4jvd8cax2x354vvzl4jhyrgwv2j42czyru72t473fgmjr764nrnt6pz6mhrtrv3mt2qva50szhkg6mushtewks9t7g A Cost-Effective Encryption Strategy Starts With Key Management<br/><br/>Key management is more complex than ever. Your choices are: Rely on your cloud provider or manage keys locally; Encrypt only the most critical data; Or encrypt everything.<br/><br/><a href="https://www.darkreading.com/cloud-security/a-cost-effective-encryption-strategy-starts-with-key-management">https://www.darkreading.com/cloud-security/a-cost-effective-encryption-strategy-starts-with-key-management</a> 2024-05-14T20:25:57Z https://yabu.me/nevent1qqs92569kau5vds7vvdt6ngctw8qdm2vsyg35cj5wqrm7zc0urtarvgzyru72t473fgmjr764nrnt6pz6mhrtrv3mt2qva50szhkg6mushtewj27790 Dangerous Google Chrome Zero-Day Allows Sandbox Escape<br/><br/>Exploit code is circulating for CVE-2024-4761, disclosed less than a week after a similar security vulnerability was disclosed as being used in the wild.<br/><br/><a href="https://www.darkreading.com/vulnerabilities-threats/dangerous-google-chrome-zero-day-sandbox-escape">https://www.darkreading.com/vulnerabilities-threats/dangerous-google-chrome-zero-day-sandbox-escape</a> 2024-05-14T16:50:51Z https://yabu.me/nevent1qqs2ua4ll92m02nd70cxd08u2fn7qpgfddqv802vnhtlavtpzdzkjfszyru72t473fgmjr764nrnt6pz6mhrtrv3mt2qva50szhkg6mushtewrk3qck DNS Tunneling Abuse Expands to Tracking &amp;amp; Scanning Victims<br/><br/>Several campaigns are leveraging the evasive tactic to provide useful insights into victims&#39; online activities and find new ways to compromise organizations.<br/><br/><a href="https://www.darkreading.com/cyberattacks-data-breaches/dns-tunneling-abuse-expands-tracking-scanning-victims">https://www.darkreading.com/cyberattacks-data-breaches/dns-tunneling-abuse-expands-tracking-scanning-victims</a> 2024-05-14T14:25:56Z https://yabu.me/nevent1qqsy8kyencq7svawp3x08rmkanpfgzyeuawtvtlqq348c3qldt7fqeqzyru72t473fgmjr764nrnt6pz6mhrtrv3mt2qva50szhkg6mushtewhzktr6 There Is No Cyber Labor Shortage<br/><br/>There are plenty of valuable candidates on the market. Hiring managers are simply looking in the wrong places.<br/><br/><a href="https://www.darkreading.com/cybersecurity-operations/there-is-no-cyber-labor-shortage">https://www.darkreading.com/cybersecurity-operations/there-is-no-cyber-labor-shortage</a> 2024-05-14T14:00:28Z https://yabu.me/nevent1qqsqpxpn8z5j3rh7g2vk7wwl0tm4yt57kyj0rl9wp3n7m3wt7hpaj8gzyru72t473fgmjr764nrnt6pz6mhrtrv3mt2qva50szhkg6mushtewvjx7hl Heartbleed: When Is It Good to Name a Vulnerability?<br/><br/>Ten years have passed since Heartbleed was first identified, but the security industry is still grappling with the question of branded vulnerabilities and naming vulnerabilities appropriately.<br/><br/><a href="https://www.darkreading.com/vulnerabilities-threats/heartbleed-when-is-it-good-to-name-a-vulnerability">https://www.darkreading.com/vulnerabilities-threats/heartbleed-when-is-it-good-to-name-a-vulnerability</a> 2024-05-14T12:51:55Z https://yabu.me/nevent1qqs0d9u0m8kur0fe8f6edgx6hwaanhd2rrn48p0qnddk4e9egatg7nqzyru72t473fgmjr764nrnt6pz6mhrtrv3mt2qva50szhkg6mushtewk74syc 500 Victims In, Black Basta Reinvents With Novel Vishing Strategy<br/><br/>Ransomware groups have always created problems for their victims that only they could solve. Black Basta is taking that core idea in a creative, new direction.<br/><br/><a href="https://www.darkreading.com/cyberattacks-data-breaches/500-victims-later-black-basta-reinvents-novel-vishing-strategy">https://www.darkreading.com/cyberattacks-data-breaches/500-victims-later-black-basta-reinvents-novel-vishing-strategy</a> 2024-05-13T21:25:54Z https://yabu.me/nevent1qqsq45mpcrtd8v4zchvlw47z6nkyuqegvtaf64q2p42ttqpzxhsae2czyru72t473fgmjr764nrnt6pz6mhrtrv3mt2qva50szhkg6mushtewdpnl00 Ukrainian, Latvian TV Hijacked to Broadcast Russian Celebrations<br/><br/>At least 15 television channels were interrupted in Ukraine alone, which, reportedly, is not out of the norm in this &#34;information war.&#34;<br/><br/><a href="https://www.darkreading.com/cyberattacks-data-breaches/ukrainian-latvian-tv-hijacked-to-broadcast-russian-celebrations">https://www.darkreading.com/cyberattacks-data-breaches/ukrainian-latvian-tv-hijacked-to-broadcast-russian-celebrations</a> 2024-05-13T20:25:40Z https://yabu.me/nevent1qqsrydc6ttxdxqf4thfpmw3gmgqltmclxjc2rsds40rtnfhn4pk4peczyru72t473fgmjr764nrnt6pz6mhrtrv3mt2qva50szhkg6mushtewjm2ff7 IntelBroker Nabs Europol Info; Agency Investigating<br/><br/>Europe&#39;s cross-border law enforcement agency says the well-known hacking outfit, contrary to claims, did not access operational data.<br/><br/><a href="https://www.darkreading.com/cyberattacks-data-breaches/intelbroker-nabs-europol-info-agency-investigating">https://www.darkreading.com/cyberattacks-data-breaches/intelbroker-nabs-europol-info-agency-investigating</a> 2024-05-13T16:51:32Z https://yabu.me/nevent1qqsvsraetv68qv4a5l7hr2wjuucu5jpmuals766rexd0tez7eugkn6qzyru72t473fgmjr764nrnt6pz6mhrtrv3mt2qva50szhkg6mushtewg5cqzu Why Tokens Are Like Gold for Opportunistic Threat Actors<br/><br/>When setting authentication token expiry policies, always lean in to security over employee convenience.<br/><br/><a href="https://www.darkreading.com/cyberattacks-data-breaches/why-tokens-are-like-gold-for-opportunistic-threat-actors">https://www.darkreading.com/cyberattacks-data-breaches/why-tokens-are-like-gold-for-opportunistic-threat-actors</a> 2024-05-13T14:25:51Z https://yabu.me/nevent1qqsrgqsqmlwexdg0mvnz7y2wyegh7022p9fhv94qzxf3cqg29uzjp4szyru72t473fgmjr764nrnt6pz6mhrtrv3mt2qva50szhkg6mushtewq96qyl Millions of IoT Devices at Risk from Flaws in Integrated Cellular Modem<br/><br/>Researchers discovered seven vulnerabilities — including an unauthenticated RCE issue — in widely deployed Telit Cinterion modems.<br/><br/><a href="https://www.darkreading.com/ics-ot-security/millions-of-iot-devices-at-risk-from-flaws-in-integrated-cellular-modem">https://www.darkreading.com/ics-ot-security/millions-of-iot-devices-at-risk-from-flaws-in-integrated-cellular-modem</a> 2024-05-10T22:50:35Z https://yabu.me/nevent1qqsrzts4rsvsu6ejlnm6yalqx66y68su5ae3efacwn8hh7s4k6glgrqzyru72t473fgmjr764nrnt6pz6mhrtrv3mt2qva50szhkg6mushtewhlux2q CISO as a CTO: When and Why It Makes Sense<br/><br/>Enterprises are increasingly recognizing that the CISO&#39;s skills and experience building risk-based cyber programs translate well to other C-suite positions.<br/><br/><a href="https://www.darkreading.com/cybersecurity-careers/ciso-as-a-cto-when-and-why-it-makes-sense">https://www.darkreading.com/cybersecurity-careers/ciso-as-a-cto-when-and-why-it-makes-sense</a> 2024-05-10T18:50:56Z https://yabu.me/nevent1qqs0s504xmmxa4snaludqmn9x6ge4m07j6puxvaacgjtvv3d0u2nlrszyru72t473fgmjr764nrnt6pz6mhrtrv3mt2qva50szhkg6mushtewjl73sf Reality Defender Wins RSAC Innovation Sandbox Competition<br/><br/>In a field thick with cybersecurity startups showing off how they use AI and LLMs, Reality Defender stood out for its tool for detecting and labeling deepfakes and other artificial content.<br/><br/><a href="https://www.darkreading.com/cyber-risk/reality-defender-wins-rsac-innovation-sandbox">https://www.darkreading.com/cyber-risk/reality-defender-wins-rsac-innovation-sandbox</a> 2024-05-10T18:25:59Z https://yabu.me/nevent1qqsd3xq9mfzuzmmp9f3ul6vu0glkzxr52kyewyjcn255lt7t30lg92czyru72t473fgmjr764nrnt6pz6mhrtrv3mt2qva50szhkg6mushtew9gc44x Is CISA&#39;s Secure by Design Pledge Toothless?<br/><br/>CISA&#39;s agreement is voluntary and, frankly, basic. Signatories say that&#39;s a good thing.<br/><br/><a href="https://www.darkreading.com/cybersecurity-operations/rsa-2024-cisa-secure-design-pledge-necessary-toothless">https://www.darkreading.com/cybersecurity-operations/rsa-2024-cisa-secure-design-pledge-necessary-toothless</a> 2024-05-10T18:25:51Z https://yabu.me/nevent1qqsggu4zumf29ngmuzs0acvhhwlrxncdhpqaumsq9jm353xfqlqe4zqzyru72t473fgmjr764nrnt6pz6mhrtrv3mt2qva50szhkg6mushtewh9tn40 Ascension Healthcare Suffers Major Cyberattack<br/><br/>The attack cut off access to electronic healthcare records (EHRs) and ordering systems, plunging the organization and its health services into chaos.<br/><br/><a href="https://www.darkreading.com/cyberattacks-data-breaches/ascension-healthcare-hit-by-cyberattack">https://www.darkreading.com/cyberattacks-data-breaches/ascension-healthcare-hit-by-cyberattack</a> 2024-05-10T16:50:22Z https://yabu.me/nevent1qqsdprp7dnlmpazm2hsn6y7yuuw8nx30exlslx8l9glg7uh2zpg54qszyru72t473fgmjr764nrnt6pz6mhrtrv3mt2qva50szhkg6mushtew8k7tfx Dark Reading &#39;Drops&#39; Its First Podcast<br/><br/>Our brand-new podcast, Dark Reading Confidential, has officially launched. You don&#39;t want to miss our first episode with the CISO and chief legal officer from Reddit and a cybersecurity attorney, who ...<br/><br/><a href="https://www.darkreading.com/cyber-risk/dark-reading-drops-its-first-podcast">https://www.darkreading.com/cyber-risk/dark-reading-drops-its-first-podcast</a> 2024-05-10T15:50:50Z https://yabu.me/nevent1qqsdg8mxmd3xv4vgl9r4p40syadsnel85ams2fumugcuelfql2rvx9czyru72t473fgmjr764nrnt6pz6mhrtrv3mt2qva50szhkg6mushtewpq8nyp Dark Reading Confidential: The CISO and the SEC<br/><br/>Episode 1 of Dark Reading Confidential brings Frederick “Flee” Lee, CISO of Reddit, Beth Burgin Waller, a practicing cyber attorney who represents many CISOs, and Ben Lee, Chief Legal Officer of Reddi...<br/><br/><a href="https://www.darkreading.com/cyber-risk/dark-reading-confidential-the-ciso-and-the-sec">https://www.darkreading.com/cyber-risk/dark-reading-confidential-the-ciso-and-the-sec</a> 2024-05-10T15:25:51Z https://yabu.me/nevent1qqs8jplttm7res6wfxk66m5azu3vudt5r05g69sf2qa9sqd84hnp05szyru72t473fgmjr764nrnt6pz6mhrtrv3mt2qva50szhkg6mushtew66pl3v You&#39;ve Been Breached: What Now?<br/><br/>Breaches are inevitable. Here are four steps to recovery and future-proofing your business.<br/><br/><a href="https://www.darkreading.com/cyberattacks-data-breaches/you-have-been-breached-what-now">https://www.darkreading.com/cyberattacks-data-breaches/you-have-been-breached-what-now</a> 2024-05-10T14:00:48Z https://yabu.me/nevent1qqsyf896j6thf76eexf9qdpqsslxgxc0wnwppnsn0fylu5ad4yghhsqzyru72t473fgmjr764nrnt6pz6mhrtrv3mt2qva50szhkg6mushtewkvd3vn Cybersecurity in a Race to Unmask a New Wave of AI-Borne Deepfakes<br/><br/>Kevin Mandia, CEO of Mandiant at Google Cloud, calls for content &#34;watermarks&#34; as the industry braces for a barrage of mind-bending AI-generated fake audio and video traffic.<br/><br/><a href="https://www.darkreading.com/threat-intelligence/cybersecurity-in-a-race-to-unmask-a-new-wave-of-ai-borne-deepfakes">https://www.darkreading.com/threat-intelligence/cybersecurity-in-a-race-to-unmask-a-new-wave-of-ai-borne-deepfakes</a> 2024-05-10T13:00:46Z https://yabu.me/nevent1qqs2q66eqy594huned8w7tnjrjt4kqzq8j43d6saufzwzqqevewn2cczyru72t473fgmjr764nrnt6pz6mhrtrv3mt2qva50szhkg6mushtewxfjgqr CISA Courts Private Sector to Get Behind CIRCIA Reporting Rules<br/><br/>New regulations will require the private sector to turn over incident data to CISA within three days or face enforcement. Here&#39;s how the agency is presenting this as a benefit to the entire private se...<br/><br/><a href="https://www.darkreading.com/cybersecurity-operations/cisa-courts-private-sector-to-get-behind-circia-reporting-rules">https://www.darkreading.com/cybersecurity-operations/cisa-courts-private-sector-to-get-behind-circia-reporting-rules</a> 2024-05-10T00:28:10Z https://yabu.me/nevent1qqsvtqenmfeze76ktll533y5ch6r5g9l203lfy57dsjxu63tsd9pgvszyru72t473fgmjr764nrnt6pz6mhrtrv3mt2qva50szhkg6mushtewlqpy8p &#39;The Mask&#39; Espionage Group Resurfaces After 10-Year Hiatus<br/><br/>Researchers recently spotted the Spanish-speaking threat actor — with nearly 400 previous victims under its belt — in a new campaign in Latin America and Central Africa.<br/><br/><a href="https://www.darkreading.com/cyberattacks-data-breaches/-the-mask-espionage-group-resurfaces-after-10-year-hiatus">https://www.darkreading.com/cyberattacks-data-breaches/-the-mask-espionage-group-resurfaces-after-10-year-hiatus</a> 2024-05-09T21:50:48Z https://yabu.me/nevent1qqsyf70p7z7yyzqsajqhykkssgm5ls8fnnyp0y0x49qa2lwu8e9fe6szyru72t473fgmjr764nrnt6pz6mhrtrv3mt2qva50szhkg6mushtew68w8us 2 (or 5) Bugs in F5 Asset Manager Allow Full Takeover, Hidden Accounts<br/><br/>F5 customers should patch immediately, though even that won&#39;t protect them from every problem with their networked devices.<br/><br/><a href="https://www.darkreading.com/application-security/2-or-5-bugs-in-f5-asset-manager-allow-full-takeover-hidden-accounts">https://www.darkreading.com/application-security/2-or-5-bugs-in-f5-asset-manager-allow-full-takeover-hidden-accounts</a> 2024-05-09T21:25:14Z https://yabu.me/nevent1qqsz0qvkry9aqwpm78y638etw7vgazed6rzeda3gegpdn6rwqteuu7gzyru72t473fgmjr764nrnt6pz6mhrtrv3mt2qva50szhkg6mushtew47pwnf CyberProof Announces Strategic Partnership With Google Cloud<br/><br/><a href="https://www.darkreading.com/cloud-security/cyberproof-announces-strategic-partnership-with-google-cloud">https://www.darkreading.com/cloud-security/cyberproof-announces-strategic-partnership-with-google-cloud</a> 2024-05-09T20:25:22Z