DarkReading.com: Top Cybersecurity Stories

List of common passwords at the root of cyberattacks.

Views expressed in this cybersecurity, cybercrime update are those of the reporters and correspondents.  Accessed on 23 October 2022, 1413 UTC. Content provided by "DarkReading.com."

Source: https://www.darkreading.com/

Please click link or scroll down to read your selections.  Thanks for joining us today.

Russ Roberts (https://www.hawaiicybersecurityjournal.net and https://paper.li/RussellRoberts).

 TOP STORIES

List of Common Passwords Accounts for Nearly All Cyberattacks

Oct 21, 2022

Half of a million passwords from the RockYou2021 list account for 99.997% of all credential attacks against a variety of honeypots, suggesting attackers are just taking the easy road.

FBI: Iranian Threat Group Likely to Target US Midterms

Oct 21, 2022

Similar to what happened around the 2020 election, FBI warns that the Emennet Pasargad group is poised to target officials and companies with embarrassing hack-and-leak campaigns.

Google's GUAC Aims to Democratize Software Supply Chain Security Metadata

Oct 21, 2022

Software makers and customers will be able to query graph database for information about the security and provenance of components in applications and codebases.

Iron Man Started His Journey From Scratch & Your Security Awareness Program Can Too

Oct 21, 2022

Build your company's security awareness program a suit of high-tech cybersecurity armor along with a collaborative atmosphere.

---

Latest News

FBI: Iranian Threat Group Likely to Target US Midterms

Similar to what happened around the 2020 election, FBI warns that the Emennet Pasargad group is poised to target officials and companies with embarrassing hack-and-leak campaigns.

by Dark Reading Staff, Dark Reading

Oct 21, 2022

THREAT INTELLIGENCE

1 MIN READ

ARTICLE

---

Google's GUAC Aims to Democratize Software Supply Chain Security Metadata

Software makers and customers will be able to query graph database for information about the security and provenance of components in applications and codebases.

by Jai Vijayan, Contributing Writer, Dark Reading

Oct 21, 2022

APPLICATION SECURITY

5 MIN READ

ARTICLE

---

---

Exploit Attempts Underway for Apache Commons Text4Shell Vulnerability

The good news: The Apache Commons Text library bug is far less likely to lead to exploitation than last year's Log4j library flaw.

by Dark Reading Staff, Dark Reading

Oct 21, 2022

ATTACKS/BREACHES

1 MIN READ

ARTICLE

---

List of Common Passwords Accounts for Nearly All Cyberattacks

Half of a million passwords from the RockYou2021 list account for 99.997% of all credential attacks against a variety of honeypots, suggesting attackers are just taking the easy road.

by Robert Lemos, Contributing Writer, Dark Reading

Oct 21, 2022

ENDPOINT

4 MIN READ

ARTICLE

---

Brazilian Police Nab Suspected Member of Lapsus$ Group

Lapsus$ Group became a top target after it breached the Brazilian Ministry of Health, among other targets.

by Dark Reading Staff, Dark Reading

Oct 20, 2022

ATTACKS/BREACHES

1 MIN READ

ARTICLE

---

Microsoft Data-Exposure Incident Highlights Risk of Cloud Storage Misconfiguration

Many enterprises continue to leave cloud storage buckets exposed despite widely available documentation on how to properly secure them.

by Jai Vijayan, Contributing Writer, Dark Reading

Oct 20, 2022

CLOUD

4 MIN READ

ARTICLE

---

'FurBall' Spyware Being Used Against Iranian Citizens

New Android malware variant is part of long-running Domestic Kitten campaign being conducted by APT C-50 Group, analysts report.

by Dark Reading Staff, Dark Reading

Oct 20, 2022

ATTACKS/BREACHES

1 MIN READ

ARTICLE

---

8 Trends Driving Cybersecurity in the Public Sector

CISOs and security leaders in state and local governments are dealing with increasing threats like ransomware — with varying degrees of cyber maturity.

by Ericka Chickowski, Contributing Writer, Dark Reading

Oct 20, 2022

CLOUD

4 MIN READ

SLIDESHOW

---

MORE NEWS

Latest Commentary

Iron Man Started His Journey From Scratch & Your Security Awareness Program Can Too

Build your company's security awareness program a suit of high-tech cybersecurity armor along with a collaborative atmosphere.

by Amanda Fennell, Chief Security Officer and Chief Information Officer, Relativity

Oct 21, 2022

---

Name That Toon: Witching Hour

Feeling creative? Submit your caption and our panel of experts will reward the winner with a $25 Amazon gift card.

by John Klossner, Cartoonist

Oct 20, 2022

---

---

Are You a CISO Building Your Risk Register for 2023? Read This First

Achieving basic IT hygiene is 99% of the game.

by Chaim Mazal, Senior VP of Technology and CISO, Kandji

Oct 20, 2022

---

SBOMs: An Overhyped Concept That Won't Secure Your Software Supply Chain

We need more than the incomplete snapshot SBOMs provide to have real impact.

by Peter Morgan, President & Co-Founder, Phylum

Oct 19, 2022

---

A New Solution to the Cybersecurity Skills Gap: Building Security into Operational Teams

Why — and how — companies should consider shifting day-to-day security responsibilities out to operations teams. The move would elevate the team's level of decision-making and help address the challenge of finding professionals with security-specific credentials.

by Shamla Naidoo, Head of Cloud Strategy & Innovation, Netskope

Oct 19, 2022

---