"Godfather Banking Trojan spawns 1.2K samples across 57 countries."

Views expressed in this cybersecurity, cyber crime update are those of the reporters and correspondents.  Accessed on 26 April 2024, 1346 UTC.

Content and Source: https://feedly.com/i/subscription/feed%2Fhttp%3A%2F%2Fwww.darkreading.com%2Frss%2Fall.xml/ Dark Reading.

Please scroll down to read your selections.  Thanks for joining us today.

Russ Roberts (https://www.hawaiicybersecurityjournal.net).

Dark Reading

150K followers49 articles per week#security#tech

46

MOST POPULAR

Godfather Banking Trojan Spawns 1.2K Samples Across 57 Countries

by Nate Nelson, Contributing Writer / 19h

Mobile malware-as-a-service operators are upping their game by automatically churning out hundreds of unique samples on a whim.

J&J Spin-Off CISO on Maximizing Cybersecurity

by Karen D. Schwartz, Contributing Writer / 1h

How the CISO of Kenvue, a consumer healthcare company spun out from Johnson & Johnson, combined tools and new ideas to build out the security program.

Chip Giants Finalize Specs Baking Security into Silicon

by Agam Shah, Contributing Writer / 1h

Caliptra 1.0 offers a blueprint for integrating security features directly into microprocessors.

YESTERDAY

PCI Launches Payment Card Cybersecurity Effort in the Middle East

by Robert Lemos, Contributing Writer / 8h

The payment card industry pushes for more security in financial transactions to help combat increasing fraud in the region.

Chinese Keyboard Apps Open 1B People to Eavesdropping

2 TTPs

•

by Jai Vijayan, Contributing Writer / 15h

•

Keyboard apps have security vulnerabilities

Eight out of nine apps that people use to input Chinese characters into mobile devices have weakness that allow a passive eavesdropper to collect keystroke data.

FTC Issues $5.6M in Refunds to Customers After Ring Privacy Settlement

Ring customers receive $5.6 million refunds

•

by Dark Reading Staff / 16h

The refunds will be made to individual affected customers through thousands of PayPal payments, available to be redeemed for a limited time.

5 Attack Trends Organizations of All Sizes Should Be Monitoring

by Microsoft Security / 16h

Recent trends in breaches and attack methods offer a valuable road map to cybersecurity professionals tasked with detecting and preventing the next big thing.

The Biggest 2024 Elections Threat: Kitchen-Sink Attack Chains

Russia, Iran pose election threat

•

by Nate Nelson, Contributing Writer / 16h

Hackers can influence voters with media and breach campaigns, or try tampering with votes. Or they can combine these tactics to even greater effect.

Digital Blitzkrieg: Unveiling Cyber-Logistics Warfare

by Chahak Mittal / 20h

Cyberattacks on logistics are becoming increasingly common, and the potential impact is enormous.

Cisco Zero-Days Anchor 'ArcaneDoor' Cyber-Espionage Campaign

3 TTPs

•

by Elizabeth Montalbano, Contributing Writer / 21h

Attacks by a previously unknown threat actor leveraged two bugs in firewall devices to install custom backdoors on several government networks globally.

SolarWinds 2024: Where Do Cyber Disclosures Go From Here?

by Tom Tovar / 23h

Get updated advice on how, when, and where we should disclose cybersecurity incidents under the SEC's four-day rule after SolarWinds, and join the call to revamp the rule to remediate first.

APR 24, 2024

Attacker Social-Engineered Backdoor Code Into XZ Utils

by Jai Vijayan, Contributing Writer / 1d

Unlike the SolarWinds and CodeCov incidents, all that it took for an adversary to nearly pull off a massive supply chain attack was some slick social engineering and a string of pressure emails.

KnowBe4 to Acquire Egress

KnowBe4 acquires UK-based Egress

•

1d

[no content]

Black Girls Do Engineer Signs Education Partnership Agreement With NSA

1d

[no content]

Lights On in Leicester: Streetlights in Disarray After Cyberattack

by Dark Reading Staff / 1d

The city is stymied in efforts to pinpoint the issue since its IT systems were shut down in the wake of the cyberattack.

North Korea APT Triumvirate Spied on South Korean Defense Industry For Years

North Korean hacking groups target South Korean

•

by Nate Nelson, Contributing Writer / 1d

Lazarus, Kimsuky, and Andariel all got in on the action, stealing "important" data from firms responsible for defending their southern neighbors (from them).

Iran Dupes US Military Contractors, Gov't Agencies in Years-Long Cyber Campaign

6 TTPs

•

20by Tara Seals, Managing Editor, News, Dark Reading / 1d

A state-sponsored hacking team employed a clever masquerade and elaborate back-end infrastructure as part of a five-year info-stealing campaign that compromised the US State and Treasury Departments, and hundreds of thousands of accounts overall.

2023: A 'Good' Year for OT Cyberattacks

1d

Attacks increased by "only" 19% last year. But that number is expected to grow significently.

Patch Now: CrushFTP Zero-Day Cloud Exploit Targets US Orgs

3 TTPs

•

by Elizabeth Montalbano, Contributing Writer / 2d

•

CVE-2024-4040

An exploit for the vulnerability allows unauthenticated attackers to escape a virtual file system sandbox to download system files and potentially achieve RCE.

Fortify AI Training Datasets From Malicious Poisoning

by Tyler Farrar / 2d

Just like you should check the quality of the ingredients before you make a meal, it's critical to ensure the integrity of AI training data.