DarkReading.com: Latest cybersecurity and cybercrime news

Here's the latest cybersecurity and cyber crime news compiled by "DarkReading.com."

Views expressed in this cybersecurity and cybercrime update are those of the reporters and correspondensts.

Accessed on 25 July 2022, 0215 UTC.

Content supplied by "DarkReading.com."

Source:  https://www.darkreading.com/

Please click link or scroll down to read your selections.

Thanks for joining us today.

Russ Roberts 

https://www.hawaiicybersecurityjournal.net

https://paper.li/RussellRoberts (machine learning, artificial intelligence, IoT, and information security)

TOP STORIES

Critical Bugs Threaten to Crack Atlassian Confluence Workspaces Wide Open

Jul 22, 2022

A hardcoded password associated with the Questions for Confluence app has been publicly released, which will likely lead to exploit attempts that give cyberattackers access to all Confluence content.

Snowballing Ransomware Variants Highlight Growing Threat to VMware ESXi Environments

Jul 22, 2022

Luna, Black Basta add to rapidly growing list of malware tools targeted at virtual machines deployed on VMware's bare-metal hypervisor technology.

Google Chrome Zero-Day Weaponized to Spy on Journalists

Jul 22, 2022

Candiru attackers breached a news agency employee website to target journalists with DevilsTongue spyware, researchers say.

Mysterious, Cloud-Enabled macOS Spyware Blows Onto the Scene

Jul 21, 2022

The CloudMensis spyware, which can lift reams of sensitive information from Apple machines, is the first Mac malware observed to exclusively rely on cloud storage for C2 activities.

---

Latest News

ICYMI: Neopets & the Gaming Problem; SolarWinds Hackers Are Back; Google Ads Abused

Dark Reading's weekly roundup of all the OTHER important stories of the week.

by Tara Seals, Managing Editor, News, Dark Reading

Jul 22, 2022

APPLICATION SECURITY

7 MIN READ

ARTICLE

---

Critical Bugs Threaten to Crack Atlassian Confluence Workspaces Wide Open

A hardcoded password associated with the Questions for Confluence app has been publicly released, which will likely lead to exploit attempts that give cyberattackers access to all Confluence content.

by Jai Vijayan, Contributing Writer, Dark Reading

Jul 22, 2022

VULNERABILITIES/THREATS

5 MIN READ

ARTICLE

---

---

Google Chrome Zero-Day Weaponized to Spy on Journalists

Candiru attackers breached a news agency employee website to target journalists with DevilsTongue spyware, researchers say.

by Becky Bracken, Editor, Dark Reading

Jul 22, 2022

ATTACKS/BREACHES

2 MIN READ

ARTICLE

---

Snowballing Ransomware Variants Highlight Growing Threat to VMware ESXi Environments

Luna, Black Basta add to rapidly growing list of malware tools targeted at virtual machines deployed on VMware's bare-metal hypervisor technology.

by Jai Vijayan, Contributing Writer, Dark Reading

Jul 22, 2022

ATTACKS/BREACHES

5 MIN READ

ARTICLE

---

Phishing Bonanza: Social-Engineering Savvy Skyrockets as Malicious Actors Cash In

The ever-evolving threat from phishing is growing more sophisticated as attackers design high-pressure situations and leverage ever-more-convincing social engineering tactics to increase their success rates.

by Nathan Eddy, Contributing Writer, Dark Reading

Jul 22, 2022

ATTACKS/BREACHES

6 MIN READ

ARTICLE

---

Mysterious, Cloud-Enabled macOS Spyware Blows Onto the Scene

The CloudMensis spyware, which can lift reams of sensitive information from Apple machines, is the first Mac malware observed to exclusively rely on cloud storage for C2 activities.

by Tara Seals, Managing Editor, News, Dark Reading

Jul 21, 2022

THREAT INTELLIGENCE

6 MIN READ

ARTICLE

---

Google Becomes First Cloud Operator to Join Healthcare ISAC

Google Cloud pledges experts and other resources to Health Information Sharing and Analysis Center, a community of healthcare infrastructure operators and owners.

by Dark Reading Staff, Dark Reading

Jul 21, 2022

APPLICATION SECURITY

1 MIN READ

ARTICLE

---

The Market Is Teeming: Bargains on Dark Web Give Novice Cybercriminals a Quick Start

A study of the unregulated dark markets shows that the vast majority of malware, exploits, and attacker tools sell for less than $10, giving would-be criminals a fast entry point.

by Robert Lemos, Contributing Writer, Dark Reading

Jul 21, 2022

THREAT INTELLIGENCE

5 MIN READ

ARTICLE

---

MORE NEWS

Latest Commentary

Thales Expands Cybersecurity Portfolio With OneWelcome Acquisition

With more staff working remotely, identity, authentication, and access have never been more important.

by Don Tait, Senior Analyst, Omdia

Jul 22, 2022

---

What Firewalls Can — and Can't — Accomplish

Understanding the limitations of firewalls is important to protecting the organization from evolving threats.

by Pat McGarry, Chief Technology Officer, ThreatBlockr

Jul 22, 2022

---

---

The Kronos Ransomware Attack: What You Need to Know So Your Business Isn't Next

Identify your business's security posture and head off ransomware attacks with third-party risk management and vendor security assessments.

by Mike Wilkes, Chief Information Security Officer, SecurityScorecard

Jul 21, 2022

---

What InfoSec Pros Can Teach the Organization About ESG

Security pros' experience with transparency and evaluating third-party partners positions them to act as key environmental, social, and governance advisers.

by Richard Marcus, Head of Information Security, AuditBoard

Jul 20, 2022

---

How to Mitigate the Risk of Karakurt Data Extortion Group's Tactics, Techniques, and Procedures

The group has become the new face of ransomware, taking advantage of vulnerabilities and poor encryption.

by Scott Bledsoe, CEO, Theon Technology

Jul 20, 2022

---

MORE COMMENTARY