DarkReading.com

"Centralized cyber-incident reporting can improve effectiveness."

Views expressed in this cybersecurity, cyber crime update are those of the reporters and correspondents.  Accessed on 11 July 2024, 1509 UTC.

Content and Source:  https://feedly.com/i/subscription/feed%2Fhttp%3A%2F%2Fwww.darkreading.com%2Frss%2Fall.xml/DarkReading.com.

Please scroll down to read your selections.  Thanks for joining us today.

Russ Roberts (https://www.hawaiicybersecurityjournal.net).

Dark Reading

153K followers44 articles per week#security#tech

24

MOST POPULAR

Centralized Cyber-Incident Reporting Can Improve Effectiveness

by Anderson Lunsford / 1h

Companies need robust cyber-response plans and a straightforward path to transparency.

'Crystalray' Attacks Jump 10X, Using Only OSS to Steal Credentials

9 TTPs

•

by Nate Nelson, Contributing Writer / 1h

Remember when hackers used to write their own malware? Kids these days don't want to work, they just want freely available tools to do it for them.

Eldorado Ransomware Cruises Onto the Scene to Target VMware ESXi

5 TTPs

•

by Nathan Eddy, Contributing Writer / 1d

•

Eldorado ransomware targets Windows

The ransomware-as-a-service platform just rolled off the assembly line, also targets Windows, and uses Golang for cross-platform capabilities.

YESTERDAY

Microsoft's Partnership With Middle East AI Firm Under Scrutiny

by Robert Lemos, Contributing Writer / 9h

The US government worries that Group 42 Holdings, an AI firm based in the United Arab Emirates, could become a backdoor for technology leaks to China.

Fujitsu Suffers Worm-Like Attack From Something That Wasn't Ransomware

Fujitsu confirms data breach cyberattack

•

by Tara Seals, Managing Editor, News, Dark Reading / 15h

The CE giant released its investigative findings regarding a March cyberattack that resulted in data exfiltration affecting its Japanese operations.

Gen Launches Scam Artists to Highlight Emotional Toll of Cybercrime Through Creative Artwork

17h

[no content]

Saviynt Expands Capabilities With EY Alliance, Elevating Approach to External User Management With its Identity Cloud

17h

[no content]

Peloton Takes a Spin Through Court, Thanks to AI Privacy Lawsuit

Peloton faces lawsuit over privacy

•

by Dark Reading Staff / 18h

The case alleges a third-party marketer for the exercise giant improperly used customer chat data to train its AI models.

Attackers Have Been Leveraging Microsoft Zero-Day for 18 Months

by Jai Vijayan, Contributing Writer / 18h

Likely two separate threat actors are using the just-patched CVE-2024-38112 in targeted, concurrent infostealer campaigns.

Feds Uncover Sprawling, GenAI-Enabled Russian Troll Farm

by Dark Reading Staff / 21h

The bot farm was created using AI-enhanced software that was able to create a host of different false personas to spread disinformation in convincing and unsettling ways.

Poco RAT Burrows Deep Into Mining Sector

IoC > 1 IP

•

by Elizabeth Montalbano, Contributing Writer / 1d

•

11 TTPs

The novel malware targets Spanish-speaking users via malicious Google Drive links, and taps a popular C++ library to evade detection.

Privacy & Security Concerns With AI Meeting Tools

by Rob Sloan / 1d

Businesses need to find a balance between harnessing the benefits of AI assistants and safeguarding sensitive information — maintaining trust with employees and clients.

What's Bugging the NSA? A Vuln in Its 'SkillTree' Training Platform

3 TTPs

•

by Nate Nelson, Contributing Writer / 1d

Even the NSA leaves bugs in its software. In this case, it's the kind of cross-site issue that regularly slips past developers.

Google Targets Passkey Support to High-Risk Execs, Civil Society

3 TTPs

•

by Tara Seals, Managing Editor, News, Dark Reading / 1d

The tech giant has rolled out passkey support for account authentication within its Advanced Protection Program to complement existing compatibility with FIDO2 hardware keys.

JUL 9, 2024

Houthi-Aligned APT Targets Mideast Militaries With 'GuardZoo' Spyware

Yemeni hackers target Middle East military

•

by Nate Nelson, Contributing Writer / 1d

Simple malware and simple TTPs play against a backdrop of complex geopolitical conflict in the Arab world.

5 Tips to Minimize the Costly Effects of Data Exfiltration

by Megan Silverman / 1d

The more sensitive data an organization collects, the more at risk it is to a cyberattack. Here's how to limit the damage.

Cloud-Based Investigations Platform Targets Complexity in Incident Response

by Robert Lemos, Contributing Writer / 1d

Software-as-a-service company Command Zero launches with a platform for investigating cybersecurity incidents that aims to minimize the grunt work.

2024 SANS SOC Survey Reveals Critical Trends and Technologies in Cyber Defense

1d

[no content]

Attackers Already Exploiting Flaws in Microsoft's July Security Update

5 TTPs

•

by Jai Vijayan, Contributing Writer / 1d

In all, the company released fixes for a whopping 139 CVEs in its own products and four for non-Microsoft products.

Global Quantum Computing Market Expected to Reach $7.13B By 2031 As Data Protection Needs Increase

1d

[no content]

Evolve Bank & Trust Reveals 7M Impacted in LockBit Breach

Evolve Bank data breach impacts 7.6 million people

•

by Dark Reading Staff / 1d

Though the company reassures its users that customer funds were not accessed, the same cannot be said for customer information.

Chinese Threat Group APT40 Exploits N-Day Vulns at Rapid Pace

7 TTPs

•

by Kristina Beek, Associate Editor, Dark Reading / 1d

•

Chinese hacker group APT40 threatens Australian

The state-sponsored threat group is capable of exploiting fresh software vulnerabilities within hours of their initial discovery.

Trojanized jQuery Packages Spread via 'Complex' Supply Chain Attack

4 TTPs

•

by Elizabeth Montalbano, Contributing Writer / 1d

•

Trojanized jQuery packages found

The campaign, which distributes dozens of malicious jQuery variants across npm, GitHub, and jsDelivr, appears to be a manual effort, and lacks the typical pattern that characterizes similar, related attacks.

Apple Geolocation API Exposes Wi-Fi Access Points Worldwide

by Nate Nelson, Contributing Writer / 1d

Beyond the devices that use them, Wi-Fi hubs themselves can leak interesting data, thanks to some quirks in Apple's geolocation system.

END OF FEED