DarkReading.com

"DHS Inspector General:  Coast Guard shortcomings hinder US maritime security."

Views expressed in this cybersecurity, cyber crime update are those of the reporters and correspondents.  Accessed on 19 July 2024, 1457 UTC.

Content and Source:  www.darkreading.com.

Please check link or scroll down to read your selections.  Thanks for joining us today.

Russ Roberts (https://www.hawaiicybersecurityjournal.net).

 

Dark Reading

153K followers45 articles per week#security#tech

48

TODAY

DHS Inspector General: Coast Guard Shortcomings Hinder US Maritime Security

by Nate Nelson, Contributing Writer / 24min

Private sector organizations are "hesitant" to seek guidance from the Coast Guard, which isn't sufficiently equipped to help them yet.

China's APT41 Targets Global Logistics, Utilities Companies

10 TTPs

•

by Jai Vijayan, Contributing Writer / 53min

•

APT41 conducts global cyber espionage

According to Mandiant, among the many cyber espionage tools the threat actor is using is a sophisticated new dropper called DustTrap.

In Cybersecurity, Mitigating Human Risk Goes Far Beyond Training

by Masha Sedova / 53min

As threat actors get smarter about how they target employees, the onus is on organizations to create a strong line of defense — and the human element is a critical component.

Ransomware Has Outsized Impact on Gas, Energy & Utility Firms

by Robert Lemos, Contributing Writer / 1h

Attackers are more likely to target critical infrastructure industries and, when they do, they cause more disruption and ask higher ransoms, with the median payment topping $2.5 million.

CISA Publishes Resiliency Playbook for Critical Infrastructure

by Dark Reading Staff / 2h

The manual provides guidance on how to improve the resiliency of critical infrastructure.

CSA Updates Cloud Security Certificate, Training

by Dark Reading Staff / 2h

The latest version of the Cloud Security Alliance's certification provides a comprehensive catalog of essential skills that cybersecurity professionals need to master.

YESTERDAY

Sizable Chunk of SEC Charges Against SolarWinds Tossed Out of Court

by Becky Bracken, Senior Editor, Dark Reading / 16h

Judge dismisses claims against SolarWinds for actions taken after its systems had been breached, but allows the case to proceed for alleged misstatements prior to the incident.

US Data Breach Victim Numbers Increase by 1,000%, Literally

ITRC reports over billion data breach victims

•

by Dark Reading Staff / 17h

Though the number of victims has risen, the actual number of breaches has gone down, as fewer, bigger breaches affect more individuals.

High-Severity Cisco Bug Grants Attackers Password Access

CVE-2024-20419

•

by Dark Reading Staff / 19h

The vulnerability was given the highest CVSS score possible, though few details have been released due to its severity.

20 Million Trusted Domains Vulnerable to Email Hosting Exploits

3 TTPs

•

by Elizabeth Montalbano, Contributing Writer / 20h

Three newly discovered SMTP smuggling attack techniques can exploit misconfigurations and design decisions made by at least 50 email-hosting providers.

Microsoft-Signed Chinese Adware Opens the Door to Kernel Privileges

2 TTPs

•

100+by Nate Nelson, Contributing Writer / 21h

•

HotPage adware disguises as blocker

An official stamp of approval might give the impression that a purported "HotPage" adtech tool is not, in fact, a dangerous kernel-level malware — but that's just subterfuge.

AI Remains a Wild Card in the War Against Disinformation

by Erin Drake, Melissa DeOrio / 1d

Digital literacy and protective measures will be key to detecting disinformation and deepfakes as AI is used to shape public opinion and erode trust in the democratic processes, as well as identify nefarious content.

JUL 17, 2024

Iranian Cyber-Threat Group Drops New Backdoor, 'BugSleep'

9 TTPs

•

by Robert Lemos, Contributing Writer / 1d

The group — which has targeted Israel, Saudi Arabia, and other nations — often uses spear-phishing and legitimate remote management tools but is developing a brand-new homegrown tool set.

Threat Actors Ramp Up Use of Encoded URLs to Bypass Secure Email

IoC > 1 URL

•

by Jai Vijayan, Contributing Writer / 1d

•

11 TTPs

•

Phishing attackers exploit URL protection

The tactic is not new, but there has been a steady increase in its use as of this spring.

Tumeryk Inc. Launches With Free Gen AI LLM Vulnerability Scanner

1d

[no content]

MxD Research Reveals Major Disconnect Between Perceived and Actual Cybersecurity Capabilities in US Manufacturing

1d

[no content]

Top 5 Mistakes Businesses Make When Implementing Zero Trust

1d

[no content]

QBE Insurance Launches Global Cyber Coverage With QCyberProtect

QBE introduces QCyberProtect cyber policy

•

1d

[no content]

Aura Partners With Mosaic Compliance Services to Launch a Program to Protect Auto Dealers and Buyers From Cybercrime

1d

[no content]

DPRK Hackers Tweak Malware to Lure MacOS Users into Video Calls

2 TTPs

•

by Dark Reading Staff / 1d

North Korean espionage campaign delivers updated BeaverTail info stealer by spoofing legitimate video calling service, researcher finds.

West African Crime Syndicate Taken Down by Interpol Operation

63 arrested in global operation

•

by Dark Reading Staff / 1d

Law enforcement managed to arrest numerous members of Black Axe, a notorious group engaged in a wide variety of criminal activity.

Orgs Are Finally Making Moves to Mitigate GenAI Risks

by Jai Vijayan, Contributing Writer / 1d

With AI use ramping up rapidly, a growing number of enterprise security teams have begun putting controls in place to protect sensitive data from accidental exposure and leaks.

'BadPack' APK Files Make Android Malware Hard to Detect

by Elizabeth Montalbano, Contributing Writer / 1d

Manipulated header info within files, in mobile Trojans like TeaBot and others, makes it difficult for defenders to analyze and detect them.

Training at Black Hat to Focus on Equipping Cybersecurity Leaders With Soft Skills

by Joan Goodchild / 1d

A two-day presentation will examine the social-behavioral aspects of cybersecurity leadership to drive team success.

AI Consortium Plans Toolkit to Rate AI Model Safety

by Agam Shah, Contributing Writer / 2d

An AI consortium consisting of top tech companies will release a toolkit later this year for measuring the safety of generative AI models.

Security End-Run: 'AuKill' Shuts Down Windows-Reliant EDR Processes

by Nate Nelson, Contributing Writer / 2d

Russian threat actor FIN7 has shifted gears multiple times in recent years, focusing now on helping ransomware groups be even more covertly effective.