"Russian trolls pose as reputable media to sow US election chaos."

Views expressed in this cybersecurity, cyber crime update are those of the reporters and correspondents.  Accessed on 26 October 2024, 1651 UTC.

Content and Source:  Email subscription via https://feedly.com.   https://feedly.com/i/subscription/feed%2Fhttp%3A%2F%2Fwww.darkreading.com%2Frss%2Fall.xml

Please check link or scroll down to read your selections.  Thanks for joining us today.

Russ Roberts (https://www.hawaiicybersecurityjournal.net).

Dark Reading

158K followers47 articles per week#security#tech

44

Most popular

Russian Trolls Pose as Reputable Media to Sow US Election Chaos

Russian trolls spread election disinformation

•

29by Becky Bracken, Senior Editor, Dark Reading / 2d

Operation Overload pushes dressed up Russian state propaganda with the aim of flooding the US with election disinformation.

My Journey From the Air Force to Cybersecurity

28by Ryan Williams Sr. / 1d

Cybersecurity is mission-driven, meaningful work that coincides with the service branches' goals to protect, defend, and create a safer world.

Microsoft SharePoint Vuln Is Under Active Exploit

3 TTPs

•

20by Dark Reading Staff / 2d

The risk of exploitation is heightened, thanks to a proof-of-concept that's been made publicly available.

Yesterday

LinkedIn Hit With $335M Fine for Data Privacy Violations

LinkedIn fined 310 million euros

•

by Dark Reading Staff / 19h

The networking company found liable for illegally gathering user data for targeted advertising by the Irish Data Protection Commission.

SEC Fines Companies Millions for Downplaying SolarWinds Breach

SEC fines four companies $7M

•

by Becky Bracken, Senior Editor, Dark Reading / 19h

Four companies — Avaya, Check Point, Mimecast, and Unisys — have been charged by the SEC for misleading disclosures in the aftermath of the 2020 SolarWinds compromise.

Russia's APT29 Mimics AWS Domains to Steal Windows Credentials

11 TTPs

•

by Nate Nelson, Contributing Writer / 20h

•

AWS seizes APT29 phishing domains

Kremlin intelligence carried out a wide-scale phishing campaign in contrast to its usual, more targeted operations.

UnitedHealth Reveals 100M Compromised in Change Healthcare Breach

Change Healthcare breach affects 100M

•

by Kristina Beek, Associate Editor, Dark Reading / 20h

Eight months after the breach occurred, Change Healthcare has finally sent out millions of notices of compromised data to affected individuals.

Cybersecurity Isn't Easy When You're Trying to Be Green

by Robert Lemos, Contributing Writer / 1d

Renewable energy firms deal with a large cyberattack surface area, given the distributed nature of power generation and more pervasive connectivity.

Open Source LLM Tool Sniffs Out Python Zero-Days

1d

Vulnhuntr is a Python static code analyzer that uses Claude AI to find and explain complex, multistep vulnerabilities.

'Shift Left' Gets Pushback, Triggers Security Soul Searching

by Robert Lemos, Contributing Writer / 1d

A government report's criticism of the 100x metric often used to justify fixing software earlier in development fuels a growing debate over pushing responsibility for secure code onto developers.

Oct 24, 2024

AWS's Predictable Bucket Names Make Accounts Easier to Crack

Execution (Enterprise TA0002)

•

by Becky Bracken, Senior Editor, Dark Reading / 1d

Amazon's open source Cloud Development Kit generates dangerously predictable naming patterns that could lead to an account takeover.

Grip Security Releases 2025 SaaS Security Risks Report

Majority of SaaS tools unmanaged

•

1d

[no content]

Jake Williams Joins Hunter Strategy As VP of RND & Managing Director of Hunter Labs

1d

[no content]

American Water Under Investigation for Cyberattack Potentially Affecting 14M Customers

American Water cyberattack highlights

•

1d

[no content]

Microsoft: Healthcare Sees 300% Surge in Ransomware Attacks

Healthcare faces rising ransomware threats

•

by Dark Reading Staff / 1d

Even after the ransom is paid, such attacks lead to spikes in strokes and heart attacks and increased wait times for patients.

Critical Bug Exploited in Fortinet's Management Console

4 TTPs

•

by Nate Nelson, Contributing Writer / 1d

•

CVE-2024-47575

An attacker compromised one of Fortinet's most sensitive products and mopped up all kinds of reconnaissance data helpful for future mass device attacks.

Cisco ASA, FTD Software Under Active VPN Exploitation

5 TTPs

•

by Dark Reading Staff / 2d

•

CVE-2024-20482 & 1 other

Unauthenticated threat actors can remotely cause a denial-of-service (DoS) cyberattack within the Remote Access VPN software in Cisco's ASA and Firepower software.

AI Chatbots Ditch Guardrails After 'Deceptive Delight' Cocktail

Adversary-in-the-Middle (Enterprise T1557)

•

by Tara Seals, Managing Editor, News, Dark Reading / 2d

•

Deceptive Delight jailbreaks AI models

The latest GenAI jailbreak technique tricks chatbots into returning restricted content by blending different prompt topics together.

Why Cybersecurity Acumen Matters in the C-Suite

by Erik Gaston / 2d

Until CEOs and boards prioritize learning more about mitigating threats, organizations are leaving themselves and their businesses open to the potential for disaster.

Codasip Donates Tools to Develop Memory-Safe Chips

Codasip donates CHERI RISC-V SDK

•

by Dark Reading Staff / 2d

The software development kit will simplify building and testing of CHERI-enabled RISC-V applications.

Oct 23, 2024

'Prometei' Botnet Spreads Its Cryptojacker Worldwide

16 TTPs

•

by Nate Nelson, Contributing Writer / 2d

The Russian-language malware primarily enlists computers to mine Monero, but theoretically it can do worse.

Lazarus Group Exploits Chrome Zero-Day in Latest Campaign

5 TTPs

•

by Jai Vijayan, Contributing Writer / 2d

•

CVE-2024-4947

The North Korean actor is going after cryptocurrency investors worldwide leveraging a genuine-looking game site and AI-generated content and images.

Mobile Apps With Millions of Downloads Expose Cloud Credentials

Hardcoded credentials risk millions

•

by Elizabeth Montalbano, Contributing Writer / 3d

Popular titles on both Google Play and Apple's App Store include hardcoded and unencrypted AWS and Azure credentials in their codebases or binaries, making them vulnerable to misuse by threat actors.

The US Needs a Better Energy Grid to Win the AI Arms Race

by Stephen Kines / 3d

The longer we avoid reform, the further behind we'll fall in AI innovation — and the more vulnerable we'll be.

Bumblebee Malware Is Buzzing Back to Life

8 TTPs

•

by Becky Bracken, Senior Editor, Dark Reading / 3d

•

Bumblebee malware loader resurfaces threat

Despite a law enforcement sweep last May, the sophisticated downloader malware is re-emerging.

Breaking Barriers: Making Cybersecurity Accessible for Neurodiverse Professionals

by Joan Goodchild / 3d

Cybersecurity is not "one size fits all." Employers, recruiters, and managers need to embrace neurodiversity through inclusive hiring practices, tailored training programs, and adaptive management styles.

Oct 22, 2024

Samsung Zero-Day Vuln Under Active Exploit, Google Warns

5 TTPs

•

by Dark Reading Staff / 3d

If it's exploited, bad actors can execute arbitrary code while evading detection thanks to a renamed process.

OPA for Windows Vulnerability Exposes NTLM Hashes

6 TTPs

•

by Jai Vijayan, Contributing Writer / 3d

The vulnerability affects all versions prior to v0.68.0 and highlights the risks organizations assume when consuming open source software and code.

Honeywell and Google Cloud to Accelerate Auto Operations With AI Agents for the Industrial Sector

Honeywell partners with Google AI

•

3d

[no content]

SoftwareOne Launches Cloud Competency Centre in Malaysia

3d

[no content]

Retail & Hospitality ISAC Launches Program Aimed at Securing Supply Chains

3d

[no content]

Most US Political Campaigns Lack DMARC Email Protection

75% of Senate campaigns lack DMARC

•

by Dark Reading Staff / 3d

Without DMARC, campaigns remain highly susceptible to phishing, domain spoofing, and impersonation.

Swarms of Fake WordPress Plug-ins Infect Sites With Infostealers

11 TTPs

•

by Elizabeth Montalbano, Contributing Writer / 3d

•

Fake WordPress plugins spread malware

GoDaddy flagged a ClickFix campaign that infected 6,000 sites in a one-day period, with attackers using stolen admin credentials to distribute malware.

Tricky CAPTCHA Caught Dropping Lumma Stealer Malware

4 TTPs

•

by Becky Bracken, Senior Editor, Dark Reading / 4d

•

Lumma Stealer uses fake CAPTCHA

The persistent infostealer's latest campaign inserts fake CAPTCHA pages into legitimate applications, fooling users into executing the malicious payload, researchers find.

What Today's SOC Teams Can Learn From Baseball

by Mike Mitchell / 4d

There are more similarities between developing a professional athlete and developing a cybersecurity pro than you might expect.

Name That Toon: The Big Jump

by John Klossner, Cartoonist / 4d

Feeling creative? Submit your caption and our panel of experts will reward the winner with a $25 Amazon gift card.

EU Adopts Cyber Resilience Act to Regulate Internet of Things

by Jennifer Lawinski, Contributing Writer / 4d

The European Union adopted a new law setting EU-wide cybersecurity requirements for connected devices to ensure