"Critical bug allows DoS, RCE, data leaks in all major cloud platforms."

Views expressed in this cybersecurity, cyber crime update are those of the reporters and correspondents.  Accessed on 21 May 2024, 1345 UTC.

Content and source: https://feedly.com/i/subscription/feed%2Fhttp%3A%2F%2Fwww.darkreading.com%2Frss%2Fall.xml/Dark Reading.

Please scroll down to read your selections.  Thanks for joining us today.

Russ Roberts (https://www.hawaiicybersecurityjournal.net).

Dark Reading

151K followers45 articles per week#security#tech

14

MOST POPULAR

Critical Bug Allows DoS, RCE, Data Leaks in All Major Cloud Platforms

CVE-2024-4323

•

28by Nate Nelson, Contributing Writer / 17h

An on-by-default endpoint in ubiquitous logging service Fluent Bit contains an oversight that hackers can toy with to rattle most any cloud environment.

Transforming CISOs Into Storytellers

by Grant Gross, Contributing Writer / 1h

Faced with chilling new SEC rules, chief information security officers are learning soft skills to help them better communicate cybersecurity concerns with the C-suite.

OpenSSF Siren to Share Threat Intelligence for Open Source Software

OpenSSF introduces Siren threat intelligence

•

1h

The Siren email mailing list will focus on operational impact and response and act as a central location to provide information about threats and necessary post-disclosure activities.

YESTERDAY

DoJ Shakes Up North Korea's Widespread IT Freelance Scam Operation

Arizona woman aids North Koreans in IT job scam

•

by Robert Lemos, Contributing Writer / 13h

Fraudsters based in the US and Europe indicted for helping North Korea's nation-state groups establish fake freelancer identities and evade sanctions.

Google Pitches Workspace as Microsoft Email Alternative, Citing CSRB Report

Google criticizes Microsoft

•

by Jai Vijayan, Contributing Writer / 15h

The new Secure Alternative Program from Google aims to entice customers away from Exchange Online and break Microsoft's dominance in the enterprise.

CyberArk Picks Up Machine Identity Manager Venafi for $1.54B

CyberArk to acquire Venafi

•

by Dark Reading Staff / 16h

The acquisition gives CyberArk new IoT identity and certificate life-cycle management, cryptographic code-signing, and other services to secure the enterprise cloud.

HP Catches Cybercriminals 'Cat-Phishing' Users

3 TTPs

•

17h

•

HP catches cybercriminals using cat-phishing

[no content]

Data Breach Response Provider, CyEx, Acquires Settlement Administrator, Simpluris Inc.

17h

[no content]

Deepfakes Rank as the Second Most Common Cybersecurity Incident for US Businesses

17h

[no content]

ZeroRisk Cybersecurity Expands Global Presence With US Launch

17h

[no content]

NRECA Receives $4M in DOE Funding to Boost Electric Co-op Cybersecurity Preparedness

17h

[no content]

Students Spot Washing Machine App Flaw That Gives Out Free Cycles

Students discover laundry security bug

•

by Kristina Beek, Associate Editor, Dark Reading / 18h

UCSC students say that after reporting the bug months ago, they're still able to rack up unlimited free wash loads at their local laundromat.

What American Enterprises Can Learn From Europe's GDPR Mistakes

by Apu Pavithran / 22h

As the US braces for a data privacy overhaul, companies need to update data practices, train staff, and ensuring compliance from the outset to avoid Europe's costly missteps.

Android Banking Trojan Antidot Disguised as Google Play Update

Input Capture (Mobile T1417)

•

by Nathan Eddy, Contributing Writer / 1d

•

New Antidot Android Trojan discovered

Antidot uses overlay attacks and keylogging to target users' financial data.

END OF FEED