DarkReading.com

"Shields Health breach exposes 2.3M users' data."

Views expressed in this cybersecurity, cybercrime update are those of the reporters and correspondents.  Accessed on 23 April 2023, 1447 UTC.  Content provided by "DarkReading.com."

Source:  https://www.darkreading.com/ ("DarkReading.com").

Please click link or scroll down to read your selections.  Thanks for joining us today.

Russ Roberts (https://www.hawaiicybersecurityjournal.net).

Latest News

Shields Health Breach Exposes 2.3M Users' Data

The medical imaging firm's systems were compromised by a threat actor, exposing patients' driver's licenses and other identifying information.

by Dark Reading Staff, Dark Reading

Apr 21, 2023

ATTACKS/BREACHES

1 MIN READ

ARTICLE

---

North Korea's Kimsuky APT Keeps Growing, Despite Public Outing

Kim Jong Un's Swiss Army knife APT continues to spread its tendrils around the world, showing it's not intimidated by the researchers closing in.

by Nate Nelson, Contributing Writer, Dark Reading

Apr 21, 2023

THREAT INTELLIGENCE

3 MIN READ

ARTICLE

---

---

'EvilExtractor' All-in-One Stealer Campaign Targets Windows User Data

An uptick in EvilExtractor activity aims to compromise endpoints to steal browser from targets across Europe and the US, researchers say.

by Dark Reading Staff, Dark Reading

Apr 21, 2023

ENDPOINT

1 MIN READ

ARTICLE

---

'GhostToken' Opens Google Accounts to Permanent Infection

A bug in how Google Cloud Platform handles OAuth tokens opened the door to Trojan apps that could access anything in users' personal or business Google Drives, Photos, Gmail, and more.

by Tara Seals, Managing Editor, News, Dark Reading

Apr 20, 2023

REMOTE WORKFORCE

6 MIN READ

ARTICLE

---

3CX Supply Chain Attack Tied to Financial Trading App Breach

Mandiant found that North Korea's UNC4736 gained initial access on 3CX's network when an employee downloaded a weaponized but legitimately-signed app from Trading Technologies.

by Jai Vijayan, Contributing Writer, Dark Reading

Apr 20, 2023

ATTACKS/BREACHES

5 MIN READ

ARTICLE

---

Major US CFPB Data Breach Caused by Employee

The sensitivity of the personal information involved in the breach has yet to be determined by agency officials, but it affects 256,000 consumers.

by Dark Reading Staff, Dark Reading

Apr 20, 2023

ATTACKS/BREACHES

2 MIN READ

ARTICLE

---

Trigona Ransomware Trolling for 'Poorly Managed' MS-SQL Servers

Vulnerable MS-SQL database servers have external connections and weak account credentials, researchers warn.

by Dark Reading Staff, Dark Reading

Apr 20, 2023

REMOTE WORKFORCE

1 MIN READ

ARTICLE

---

'AuKill' Malware Hunts & Kills EDR Processes

Attackers are using custom malware to exploit drivers and terminate security processes so they can deploy ransomware.

by Jai Vijayan, Contributing Writer, Dark Reading

Apr 20, 2023

ATTACKS/BREACHES

3 MIN READ

ARTICLE

---

MORE NEWS

Latest Commentary

The Tangled Web of IR Strategies

Attackers have their methods timed to the second, and they know they have to get in, do their damage, and get out quickly. CISOs today must detect and block in even less time.

by Tom Brennan, CIO, Mandelbaum Barrett PC, and leads US arm of CREST International

Apr 21, 2023

---

Expert Insight: Dangers of Using Large Language Models Before They Are Baked

Today's LLMs pose too many trust and security risks.

by Gary McGraw Ph.D., Co-Founder, Berryville Institute of Machine Learning

Apr 20, 2023

---

---

Twitter's 2FA Policy Is a Call for Passkey Disruption

Overcoming the limitations of consumer MFA with a new flavor of passwordless.

by Vittorio Bertocci, Principal Architect, Okta

Apr 20, 2023

---

GPT-4 Provides Improved Answers While Posing New Questions

As is typical with emerging technologies, both innovators and regulators struggle with developments in generative AI, much less the rules that should govern its use.

by Richard Searle, Vice President of Confidential Computing, Fortanix

Apr 20, 2023

---

How to Prevent 2 Common Attacks on MFA

MFA isn't immune from the tug of war between attackers and defenders.

by Carla Roncato, Vice President of Identity, WatchGuard Technologies

Apr 19, 2023

---

MORE COMMENTARY