DarkReading.com Newsletter.

"Banks in attackers' crosshairs via open source software supply chain."

Views expressed in this cybersecurity, cybercrime update are those of the reporters and correspondents.  Accessed on 23 July 2023, 1329 UTC.

Content provided by email subscription to "Dark Reading.com Newsletter."

Source:   https://www.darkreading.com/ ("Dark Reading.com Newsletter").

Please click link or scroll down to read your selections.  Thanks for joining us today.

Russ Roberts (https://www.hawaiicybersecurityjournal.net).

TOP STORIES

Banks In Attackers' Crosshairs, Via Open Source Software Supply Chain

Jul 21, 2023

In separate targeted incidents, threat actors tried to upload malware into the Node Package Manager registry to gain access and steal credentials.

CVSS 4.0 Is Here, But Prioritizing Patches Still a Hard Problem

Jul 21, 2023

CVSS Version 4 arguably performs better, but companies also need to tailor any measure of threat to their own environment to quickly evaluate new software bugs for patching order.

Meet the Finalists for the 2023 Pwnie Awards

Jul 21, 2023

Hosts Sophia d'Antoine and Ian Roos presented the list at Summercon in Brooklyn, where they also handed out a surprise Lifetime Achievement Award.

Rootkit Attack Detections Increase at UAE Businesses

Jul 21, 2023

Detections of rootkit attacks against businesses in the United Arab Emirates are up 167% in 2023, with an increased view of their use in the Middle East overall.

---

Latest News

BGP Software Vulnerabilities Under the Microscope in Black Hat Session

In a nod to its centrality in IP networking, a Forescout researcher will parse overlooked vulnerabilities in the Border Gateway Protocol at Black Hat USA.

by Nate Nelson, Contributing Writer, Dark Reading

Jul 21, 2023

VULNERABILITIES/THREATS

3 MIN READ

ARTICLE

---

Banks In Attackers' Crosshairs, Via Open Source Software Supply Chain

In separate targeted incidents, threat actors tried to upload malware into the Node Package Manager registry to gain access and steal credentials.

by Jai Vijayan, Contributing Writer, Dark Reading

Jul 21, 2023

ATTACKS/BREACHES

4 MIN READ

ARTICLE

---

---

Rootkit Attack Detections Increase at UAE Businesses

Detections of rootkit attacks against businesses in the United Arab Emirates are up 167% in 2023, with an increased view of their use in the Middle East overall.

by Dan Raywood, Senior Editor, Dark Reading

Jul 21, 2023

DR GLOBAL

2 MIN READ

ARTICLE

---

CVSS 4.0 Is Here, But Prioritizing Patches Still a Hard Problem

CVSS Version 4 arguably performs better, but companies also need to tailor any measure of threat to their own environment to quickly evaluate new software bugs for patching order.

by Robert Lemos, Contributing Writer, Dark Reading

Jul 21, 2023

VULNERABILITIES/THREATS

3 MIN READ

ARTICLE

---

Saudi Arabia's Tuwaiq Academy Opens Cybersecurity Bootcamp

Registration has opened for the cybersecurity specialty track at Tuwaiq Academy, where students will learn a variety of related skills.

by Dark Reading Staff, Dark Reading

Jul 21, 2023

DR GLOBAL

1 MIN READ

ARTICLE

---

Microsoft 365 Breach Risk Widens to Millions of Azure AD Apps

China-linked APT actors could have single-hop access to the gamut of Microsoft cloud services and apps, including SharePoint, Teams, and OneDrive, among many others.

by Tara Seals, Managing Editor, News, Dark Reading

Jul 21, 2023

CLOUD

4 MIN READ

ARTICLE

---

White House, Big Tech Ink Commitments to Secure AI

With Big Tech companies pledging voluntary safeguards, industry-watchers assume that smaller AI purveyors will follow in their wake to make AI safer for all.

by Dark Reading Staff, Dark Reading

Jul 21, 2023

OPERATIONS

1 MIN READ

ARTICLE

---

North Korean Attackers Targeted Crypto Companies in JumpCloud Breach

Analysts continue piecing together who breached JumpCloud, why, and what else they've managed to pull off.

by Nate Nelson, Contributing Writer, Dark Reading

Jul 20, 2023

ATTACKS/BREACHES

5 MIN READ

ARTICLE

---

MORE NEWS

Latest Commentary

The Dark Side of AI

Sophisticated fraudsters are exploiting ChatGPT and CAPTCHAs to evade enterprise security defenses.

by Sam Crowther, Founder & CEO, Kasada

Jul 21, 2023

---

Should You Be Using a Cybersecurity Careers Framework?

Frameworks can help improve hiring practices and retention, and help guide education — which makes them an important asset worth exploiting.

by Jamal Elmellas , Chief Operating Officer, Focus on Security

Jul 20, 2023

---

---

Enterprise Choices in Measuring Risk

Organizations have options when it comes to choosing the right tool to quantify risk

by Curtis Franklin, Senior Analyst, Omdia

Jul 20, 2023

---

3 Ways AI Could Improve Authentication

As companies navigate how to protect themselves from the onslaught of increasingly sophisticated fraud threats, artificial intelligence will be a critical piece of next-gen authentication.

by Blair Cohen, Founder & President, AuthenticID

Jul 19, 2023

---

Reducing Security Debt in the Cloud

Security debt exists in on-premises data centers as well as in cloud platforms — but preventing it from accumulating in the cloud requires different skills, processes, and tools.

by Terence Harper, CISSP, Senior Sales Engineer, Ermetic

Jul 19, 2023

---

MORE COMMENTARY