"Don't answer the phone:  Inside a real-life vishing attack."

Views expressed in this cybersecurity, cyber crime update are those of the reporters and correspondents.  Accessed on 24 March 2024, 1512 UTC.

Content and Source:  https://feedly.com/i/subscription/feed%2Fhttp%3A%2F%2Fwww.darkreading.com%2Frss%2Fall.xml/Dark Reading.

Please scroll down to read your selections.  Thanks for joining us today.

Russ Roberts (https://www.hawaiicybersecurityjournal.net).

Dark Reading

148K followers50 articles per week#security#tech

27

MOST POPULAR

Don't Answer the Phone: Inside a Real-Life Vishing Attack

300+by Elizabeth Montalbano, Contributing Writer / 3d

Successful attackers focus on the psychological manipulation of human emotions, which is why anyone, even a tech-savvy person, can become a victim.

Tax Hackers Blitz Small Business With Phishing Emails

100+by Becky Bracken, Editor, Dark Reading / 3d

Armed with little more than an email address, scammers are trying to trick small businesses and the self employed into giving up Social Security numbers.

Federal Warning Highlights Cyber Vulnerability of US Water Systems

US warns of cyberattacks on water systems linked

•

28by Jai Vijayan, Contributing Writer / 3d

The White House urged operators of water and wastewater systems to review and beef up their security controls against attacks by Iran- and China-based groups.

MAR 22, 2024

AWS CISO: Pay Attention to How AI Uses Your Data

by Grant Gross, Contributing Writer, Dark Reading / 1d

Amazon Web Services CISO Chris Betz explains why generative AI is both a time-saving tool as well as a double-edged sword.

Russian APT Releases More Deadly Variant of AcidRain Wiper Malware

by Jai Vijayan, Contributing Writer / 1d

New AcidPour variant can attack a significantly broader range of targets including IoT devices, storage area networks, and handhelds.

Apple Stingy With Details About Latest iOS Update

iOS 17.4.1 update imminent release

•

by Dark Reading Staff / 1d

The security update comes just weeks after the release of iOS 17.4, but Apple has not included CVEs or information about the fixes.

8 Strategies for Enhancing Code Signing Security

by Murali Palanisamy / 2d

Strong code-signing best practices are an invaluable way to build trust in the development process and enable a more secure software supply chain.

Kenya to TikTok: Prove Compliance With Our Privacy Laws

Kenya government mulls TikTok ban

•

by Dark Reading Staff / 2d

Beleaguered social media platform now faces scrutiny by the Kenyan government over cybersecurity and data privacy.

Why AI Obituary Scams Are a Cyber-Risk for Businesses

by Nate Nelson, Contributing Writer / 2d

Scammers now use AI to instantly whip up SEO-friendly bereavement scams, and it's never been easier to swindle mourners or use them to get to their employers.

Strata Identity Releases New Authentication Recipes

by Dark Reading Staff / 2d

The Microsoft Identity Cookbook is a collection of orchestration recipes to help organizations adopt cloud-based identity providers.

MAR 21, 2024

Tesla Hack Team Wins $200K and a New Car

Windows 11, Tesla, Ubuntu hacked

•

by Dark Reading Staff / 2d

Zero Day Initiative awarded a total of $732,000 to researchers who found 19 unique cybersecurity vulnerabilities during the first day of Pwn2Own.

Changing Concepts of Identity Underscore 'Perfect Storm' of Cyber-Risk

by Kristina Beek, Associate Editor, Dark Reading / 2d

Forgepoint Capital's Alberto Yépez discusses how the concept of identity is changing: It doesn't just mean "us" anymore.

Ivanti Keeps Security Teams Scrambling With 2 More Vulns

by Jai Vijayan, Contributing Writer / 2d

Since the beginning of this year, the company has disclosed some seven critical bugs so far, almost all of which attackers have quickly exploited in mass attacks.

NIST's Vuln Database Downshifts, Prompting Questions About Its Future

by David Strom / 2d

NVD may be in peril, and while alternatives exist, enterprise security managers will need to plan accordingly to stay on top of new threats.

How Can We Reduce Threats From the Initial Access Brokers Market?

by Edge Editors / 2d

The ready-made access IABs offer has become an integral part of the ransomware ecosystem. Here's how to stop them before they can profit from your assets.

300K Internet Hosts at Risk for 'Devastating' Loop DoS Attack

Loop DoS attack targets UDP-based

•

by Elizabeth Montalbano, Contributing Writer / 2d

Attackers can create a self-perpetuating, infinite scenario in such a way that volumes of traffic overwhelm network resources indefinitely.

Session Takeover Bug in AWS Apache Airflow Reveals Larger Cloud Risk

by Nate Nelson, Contributing Writer / 2d

A bug exposed users of an AWS workflow management service to cookie tossing, but behind the scenes lies an even deeper issue that runs across all of the top cloud services.

Cyber Warfare: Understanding New Frontiers in Global Conflicts

by Gerasim Hovhannisyan / 3d

An arms race is developing between those using technology to target adversaries and those using it prevent attacks from succeeding.

Using East-West Network Visibility to Detect Threats in Later Stages of MITRE ATT&CK

by Tom Bienkowski / 3d

Ensuring that traffic visibility covers both client-server and server-server communications helps NetOps teams analyze and spot potential threats early on, avoiding catastrophic effects.