Darkreading.com: Latest Cybersecurity News

"Iranian APT targets U.S. with Drokbk Spyware via GitHub."

Views expressed in this cybersecurity, cybercrime update are those of the reporters and correspondents.  Accessed on 09 December 2022, 2005 UTC.  Content provided by "Darkreading.com."

Source:  https://www.darkreading.com/latest/news

Please click link or scroll down to read your selections.  Thanks for joining us today.

Russ Roberts (https://www.hawaiicybersecurityjournal.net and https://paper.li/RussellRoberts).

NEWS

Iranian APT Targets US With Drokbk Spyware via GitHub

The custom malware used by the state-backed Iranian threat group Drokbk has so far flown under the radar by using GitHub as a "dead-drop resolver" to more easily evade detection.

by Nathan Eddy, Contributing Writer, Dark Reading

December 09, 2022

THREAT INTELLIGENCE

4 MIN READ

ARTICLE

Google: Use SLSA Framework for Better Software Security

Security leaders also need to take a more holistic approach to addressing supply chain risks, company says in new research report.

by Jai Vijayan, Contributing Writer, Dark Reading

December 09, 2022

APPLICATION SECURITY

4 MIN READ

ARTICLE

3 Ways Attackers Bypass Cloud Security

At Black Hat Europe, a security researcher details the main evasion techniques attackers are currently using in the cloud.

by Kelly Jackson Higgins, Editor-in-Chief, Dark Reading

December 08, 2022

CLOUD

3 MIN READ

ARTICLE

Lack of Cybersecurity Expertise Poses Threat for Public-Safety Orgs

More than three-quarters of police and emergency responders worry about ransomware attacks and data leaks, while their organizations lag behind in technology adoption.

by Robert Lemos, Contributing Writer, Dark Reading

December 08, 2022

REMOTE WORKFORCE

3 MIN READ

ARTICLE

Report: Air-Gapped Networks Vulnerable to DNS Attacks

Common mistakes in network configuration can jeopardize the security of highly protected assets and allow attackers to steal critical data from the enterprise.

by Elizabeth Montalbano, Contributor, Dark Reading

December 08, 2022

ATTACKS/BREACHES

5 MIN READ

ARTICLE

Hacker Fails for the Win

Security researchers share their biggest initial screwups in some of their key vulnerability discoveries.

by Kelly Jackson Higgins, Editor-in-Chief, Dark Reading

December 07, 2022

VULNERABILITIES/THREATS

3 MIN READ

ARTICLE

Rackspace Incident Highlights How Disruptive Attacks on Cloud Providers Can Be

A ransomware attack on the company's Hosted Exchange environment disrupted email for thousands of mostly small and midsize businesses.

by Jai Vijayan, Contributing Writer, Dark Reading

December 07, 2022

CLOUD

5 MIN READ

ARTICLE

Fraudsters Siphon $360M From Retailers Using 50M Fake Shoppers

Cyberattackers focused on ad fraud and clickjacking stole millions during Black Friday by hijacking shopper accounts and tying up transactions.

by Robert Lemos, Contributing Writer, Dark Reading

December 07, 2022

THREAT INTELLIGENCE

4 MIN READ

ARTICLE

Zerobot Weaponizes Numerous Flaws in Slew of IoT Devices

The botnet exploits flaws in various routers, firewalls, network-attached storage, webcams, and other products and allows attackers to take over affected systems.

by Elizabeth Montalbano, Contributor, Dark Reading

December 07, 2022

REMOTE WORKFORCE

3 MIN READ

ARTICLE

For Cyberattackers, Popular EDR Tools Can Turn into Destructive Data Wipers

Microsoft, three others release patches to fix a vulnerability in their respective products that enables such manipulation. Other EDR products potentially are affected as well.

by Jai Vijayan, Contributing Writer, Dark Reading

December 07, 2022

VULNERABILITIES/THREATS

4 MIN READ

ARTICLE

Shift to Memory-Safe Languages Gains Momentum

Software firms and the National Security Agency urge developers to move to memory-safe programming languages to eliminate a major source of high-severity flaws.

by Robert Lemos, Contributing Writer, Dark Reading

December 06, 2022

APPLICATION SECURITY

4 MIN READ

ARTICLE

Russian Actors Use Compromised Healthcare Networks Against Ukrainian Orgs

Victims include at least 15 healthcare organizations, one Fortune 500 company, and other organizations in multiple countries, security vendor says.

by Jai Vijayan, Contributing Writer, Dark Reading

December 06, 2022

THREAT INTELLIGENCE

4 MIN READ

ARTICLE

Machine Learning Models: A Dangerous New Attack Vector

Threat actors can weaponize code within AI technology to gain initial network access, move laterally, deploy malware, steal data, or even poison an organization's supply chain.

by Elizabeth Montalbano, Contributor, Dark Reading

December 06, 2022

THREAT INTELLIGENCE

5 MIN READ

ARTICLE

Wiper, Disguised as Fake Ransomware, Targets Russian Orgs

The program, dubbed CryWiper, is aimed at Russian targets; it requests a ransom but has no way to decrypt any overwritten files.

by Robert Lemos, Contributing Writer, Dark Reading

December 05, 2022

THREAT INTELLIGENCE

4 MIN READ

ARTICLE

Infostealer Malware Market Booms, as MFA Fatigue Sets In

The successful combo of stolen credentials and social engineering to breach networks is increasing demand for infostealers on the Dark Web.

by Nathan Eddy, Contributing Writer, Dark Reading

December 05, 2022

THREAT INTELLIGENCE

5 MIN READ

ARTICLE

Ransomware Professionalization Grows as RaaS Takes Hold

As ransomware's prevalence has grown over the past decade, leading ransomware groups such as Conti have added services and features as part of a growing trend toward professionalization.

by Nathan Eddy, Contributing Writer, Dark Reading

December 05, 2022

THREAT INTELLIGENCE

4 MIN READ

ARTICLE

Malware Authors Inadvertently Take Down Own Botnet

A single improperly formatted command has effectively killed KmsdBot botnet, security vendor says.

by Jai Vijayan, Contributing Writer, Dark Reading

December 05, 2022

ATTACKS/BREACHES

3 MIN READ

ARTICLE

SiriusXM, MyHyundai Car Apps Showcase Next-Gen Car Hacking

A trio of security bugs allow remote attackers to unlock or start the car, operate climate controls, pop the trunk, and more — all via poorly coded mobile apps.

by Tara Seals, Managing Editor, News, Dark Reading

December 02, 2022

APPLICATION SECURITY

6 MIN READ

ARTICLE

Where Advanced Cyberattackers Are Heading Next: Disruptive Hits, New Tech

Following a year of increasingly disruptive attacks, advanced persistent threat groups will likely only become emboldened in 2023, security experts say.

by Robert Lemos, Contributing Writer, Dark Reading

December 02, 2022

THREAT INTELLIGENCE

6 MIN READ

ARTICLE

SOC Turns to Homegrown Machine Learning to Catch Cyber Intruders

A do-it-yourself machine learning system helped a French bank detect three types of exfiltration attacks missed by current rules-based systems, attendees will learn at Black Hat Europe.

by Robert Lemos, Contributing Writer, Dark Reading

December 02, 2022

ANALYTICS

4 MIN READ

ARTICLE

LastPass Discloses Second Breach in Three Months

The threat actor behind an August intrusion used data from that incident to access customer data stored with a third-party cloud service provider, and affiliate GoTo reports breach of development environment.

by Jai Vijayan, Contributing Writer, Dark Reading

December 01, 2022

APPLICATION SECURITY

3 MIN READ

ARTICLE

Artifact Poisoning in GitHub Actions Imports Malware via Software Pipelines

A vulnerability discovered in GitHub Actions could allow an attacker to poison a developer's pipeline, highlighting the risk that insecure software pipelines pose.

by Robert Lemos, Contributing Writer, Dark Reading

December 01, 2022

APPLICATION SECURITY

4 MIN READ

ARTICLE

One Year After Log4Shell, Most Firms Are Still Exposed to Attack

Though there have been fewer than expected publicly reported attacks involving the vulnerability, nearly three-quarters of organizations remain exposed to it.

by Jai Vijayan, Contributing Writer, Dark Reading

December 01, 2022

APPLICATION SECURITY

5 MIN READ

ARTICLE

IBM Cloud Supply Chain Vulnerability Showcases New Threat Class

The Hell's Keychain attack vector highlights common cloud misconfigurations and secrets exposure that can pose grave risk to enterprise customers.

by Elizabeth Montalbano, Contributor, Dark Reading

December 01, 2022

CLOUD

4 MIN READ

ARTICLE