"CISA cuts $10M in ISAC Funding and 100s of employees."

 Views expressed in this cybersecurity, cyber crime update are those of the reporters and correspondents.  Accessed on 14 March 2025, 1538 UTC.

Content and Source:  Email subscription via https://feedly.com.

https://feedly.com/i/subscription/feed%2Fhttp%3A%2F%2Fwww.darkreading.com%2Frss%2Fall.xml

Please check link or scroll down to read your selections.  Thanks for joining us today.

Russ Roberts (https://www.hawaiicybersecurityjournal.net).

Dark Reading

165K followers35 articles per week

#security#tech

74

Today

CISA Cuts $10M in ISAC Funding & 100s of Employees

CISA cuts funding for cybersecurity ISACs

•

by Nate Nelson, Contributing Writer / 41min

President Trump has long complained about perceived threats to election security. Now his DHS has kneecapped the agencies designed to support it. Experts are worried about what comes next.

Biggest Cyber Threats to the Healthcare Industry Today

by Bhavya Jain / 1h

Healthcare organizations must enhance their cybersecurity arsenal. Doing so can help them prevent financial, compliance, and reputational damage.

Remote Access Infra Remains Riskiest Corp. Attack Surface

13 TTPs

•

by Robert Lemos, Contributing Writer / 2h

Exposed login panels for VPNs and remote access systems leave companies open to attack, sometimes tripling the risk of ransomware and making it harder to get cyber insurance.

Consumer Groups Push IoT Security Bill to Address End-of-Life Concerns

by Arielle Waldman / 2h

Consumer Reports, Secure Resilient Future Foundation (SRFF), and US Public Interest Research Group (PIRG) have introduced a model bill to increase transparency around when Internet of Things devices no longer have manufacturer support.

Yesterday

OBSCURE#BAT Malware Highlights Risks of API Hooking

18 TTPs

•

by Rob Wright / 18h

•

OBSCURE#BAT malware evades detection

Researchers discovered an attack chain that uses several layers of obfuscated batch files and PowerShell scripts to deliver an advanced and persistent rootkit.

FBI, CISA Raise Alarms As Medusa Ransomware Attacks Grow

Medusa ransomware activity surges 2025

•

by Kristina Beek, Associate Editor, Dark Reading / 18h

Medusa developers have been targeting a wide variety of critical infrastructure sectors, from healthcare and technology to manufacturing and insurance, racking up its victim count as it seemingly adds to its numbers of affiliates.

Car Exploit Allows You to Spy on Drivers in Real Time

4 TTPs

•

by Nate Nelson, Contributing Writer / 23h

Just like with any regular computer, researchers figured out how to crack into, force restart, and upload malware to an aftermarket in-vehicle infotainment system.

Salt Typhoon: A Wake-up Call for Critical Infrastructure

by Gabrielle Hempel / 1d

The Salt Typhoon attacks underscored the need for unity, innovation, and resilience in the face of an increasingly sophisticated cyber-threat landscape.

F5 Integrates API Security and Networking to Address AI Onslaught

by Jeffrey Schwartz / 1d

The new F5 Application Delivery Controller and Security Platform combines BIG-IP, NGNIX, and Distributed Cloud Services, plus new AI gateway and AI assistants.

OpenAI Operator Agent Used in Proof-of-Concept Phishing Attack

8 TTPs

•

by Alexander Culafi, Senior News Writer, Dark Reading / 1d

Researchers from Symantec showed how OpenAI's Operator agent, currently in research preview, can be used to construct a basic phishing attack from start to finish.

Mar 12, 2025

Abu Dhabi Guidelines Offer Blueprint for Cybersecurity in Health

by Robert Lemos, Contributing Writer / 1d

Following increasing attacks on healthcare organizations, the United Arab Emirates has refined its regulatory strategy for improving cybersecurity in healthcare.

NIST Finalizes Differential Privacy Rules to Protect Data

by Arielle Waldman / 1d

The National Institute of Standards and Technology (NIST) has released updated differential privacy guidelines for organizations to follow to protect personally identifiable information when sharing data.

China-Backed Hackers Backdoor US Carrier-Grade Juniper MX Routers

8 TTPs

•

by Rob Wright / 1d

Mandiant researchers found the routers of several unnamed organizations (likely telcos and ISPs) were hacked by UNC3886, and contained a custom backdoor called "TinyShell."

Apple Drops Another WebKit Zero-Day Bug

7 TTPs

•

by Jai Vijayan, Contributing Writer / 1d

•

CVE-2025-24201

A threat actor leveraged the vulnerability in an "extremely sophisticated" attack on targeted iOS users, the company says.

Volt Typhoon Strikes Massachusetts Power Utility

8 TTPs

•

23by Elizabeth Montalbano, Contributing Writer / 1d

•

FBI warns of China's Volt Typhoon

The prolonged attack, which lasted 300+ days, is the first known compromise of the US electric grid by the Voltzite subgroup of the Chinese APT; during it, the APT attempted to exfiltrate critical OT infrastructure data.

'Ballista' Botnet Exploits 2023 Vulnerability in TP-Link Routers

5 TTPs

•

by Kristina Beek, Associate Editor, Dark Reading / 1d

In the past, the vulnerability was exploited to drop Mirai botnet malware. Today, it's being used once more for another botnet campaign with its own malware.

The CISO as Business Resilience Architect

by Randolph Barr / 2d

To truly become indispensable in the boardroom, CISOs need to meet the dual demands of defending against sophisticated adversaries while leading resilience strategies.

Mar 11, 2025

Whopping Number of Microsoft Zero-Days Under Attack

5 TTPs

•

29by Jai Vijayan, Contributing Writer / 2d

The number of zero-day vulnerabilities getting patched in Microsoft's March update is the company's second-largest ever.

Trump Taps Sean Plankey to Fill Empty CISA Director Chair

Trump nominates Sean Plankey CISA

•

by Kristina Beek, Associate Editor, Dark Reading / 2d

Plankey has served in numerous cybersecurity positions in the past, including during the first Trump presidency from 2018-2020.

'Desert Dexter' Hot Button Facebook Ads Tag Mideast Victims

10 TTPs

•

by Nate Nelson, Contributing Writer / 2d

•

Desert Dexter malware infects 900+

A Libya-linked threat actor has resurfaced attacking the Middle East and North Africa, using the same old political phishing tricks to deliver AsyncRAT that have worked for years.

Binance Spoofers Compromise PCs in 'TRUMP' Crypto Scam

3 TTPs

•

by Elizabeth Montalbano, Contributing Writer / 2d

An email campaign luring users with offers of free President Trump meme coins can lead to computer takeover via the ConnectWise RAT, in less than 2 minutes.

Balancing Cybersecurity Accountability & Deregulation

by Mark Houpt / 3d

While deregulation may open opportunities for growth and innovation, it also creates new risks that demand a proactive, accountable approach to security.

Democratizing Security to Improve Security Posture

by Arielle Waldman / 3d

Analysts weigh in on how democratizing cybersecurity could benefit organizations, particularly SMBs, as threats increase across the landscape.

GitHub-Hosted Malware Infects 1M Windows Users

14 TTPs

•

by Elizabeth Montalbano, Contributing Writer / 3d

Microsoft has identified a complex, malvertising-based attack chain that delivered Lumma and other infostealers to enterprise and consumer PC users; the campaign is unlikely the last of its kind.

Mar 10, 2025

'SideWinder' Intensifies Attacks on Maritime Sector

11 TTPs

•

by Jai Vijayan, Contributing Writer / 3d

The likely India-based threat group is also targeting logistics companies in a continued expansion of its activities.

Google Pays Out Nearly $12M in 2024 Bug Bounty Program

Google awards 12M$ in bug bounties

•

by Kristina Beek, Associate Editor, Dark Reading / 3d

The program underwent a series of changes in the past year, including richer maximum rewards in a variety of bug categories.

APT 'Blind Eagle' Targets Colombian Government

7 TTPs

•

by Alexander Culafi, Senior News Writer, Dark Reading / 3d

•

CVE-2024-43451

The South American-based advanced persistent threat group is using an exploit with a "high infection rate," according to research from Check Point.

Ex-Employee Found Guilty in Revenge Kill-Switch Scheme

Developer sabotages ex-employer's systems

•

by Kristina Beek, Associate Editor, Dark Reading / 3d

Clandestine kill switch was designed to lock out other users if the developer's account in the company's Windows Active Directory was ever disabled.

When Seconds Count: How to Survive Fast-and-Furious DDoS Microbursts

by Jérôme Meyer / 4d

In the battle against two-minute micro-attacks that can knock out critical communication services, the difference between success and failure can literally come down to seconds.

Mar 7, 2025

'Spearwing' RaaS Group Ruffles Feathers in Cyber-Threat Scene

6 TTPs

•

by Kristina Beek, Associate Editor, Dark Reading / 6d

The group is using the Medusa malware and taking up space once held by other notable ransomware groups like LockBot, increasing its victim list to 400 and demanding astoundingly high ransoms.

MITRE EMB3D for OT & ICS Threat Modeling Takes Flight

by Robert Lemos, Contributing Writer / 6d

Manufacturers and infrastructure providers are gaining options to satisfy regulations and boost cyber safety for embedded and industrial control systems, as EMB3D, STRIDE, and ATT&CK for ICS gain traction.

Static Scans, Red Teams, and Frameworks Aim to Find Bad AI Models

by Robert Lemos, Contributing Writer / 6d

With hundreds of artificial intelligence models found harboring malicious code, cybersecurity firms are releasing technology to help companies manage their AI development and deployment efforts.

Cybercrime's Cobalt Strike Use Plummets 80% Worldwide

by Nate Nelson, Contributing Writer / 6d

Fortra, Microsoft, and Health-ISAC have combined forces to claw back one of hackers' most prized attack tools, with massive takedowns.

Zero-Days Put Tens of 1,000s of Orgs at Risk for VM Escape Attacks

3 TTPs

•

by Rob Wright / 6d

•

CVE-2025-22224 & 2 others

More than 41,000 ESXi instances remain vulnerable to a critical VMware vulnerability, one of three that Broadcom disclosed earlier this week.

Taylor Swift Ticket Thieves Charged in Court for Resale Operation

by Kristina Beek, Associate Editor, Dark Reading / 6d

The pair found a loophole through StubHub's services, allowing them to steal tickets and resell them for personal profit, amassing hundreds of thousands of dollars.

How Cyberattacks Affect Your Staff

by Chris Butler / 7d

Businesses have a responsibility to safeguard their workforce, which is best achieved by preparing and equipping the whole organization to better face these worst-case cyber scenarios.

Mar 6, 2025

Intel Maps New vPro Chips to MITRE's ATT&CK Framework

by Agam Shah / 7d

The PC Security Stack Mappings project improves the security posture of corporate PCs by aligning each of the security features found in vPro PC and Core Ultra chips with the techniques described in MITRE's ATT&CK.

Armis Acquires Otorio to Expand OT Exposure Management Platform

Armis acquires Otorio for cybersecurity

•

by Jeffrey Schwartz / 7d

Armis will integrate Otorio's Titan platform with its cloud-based Centrix, bringing an on-premises option to the cloud-only offering.

'EncryptHub' OPSEC Failures Reveal TTPs & Big Plans

19 TTPs

•

by Nate Nelson, Contributing Writer / 7d

•

EncryptHub attacks 618 organizations globally

Is EncryptHub the most prolific cybercriminal in recent history? Or, as new information suggests, a bumbling amateur?

Under Pressure: US Charges China's APT-for-Hire Hackers

US charges Chinese hackers espionage

•

by Alexander Culafi, Senior News Writer, Dark Reading / 7d

The US Justice Department on Wednesday announced charges against members of the Chinese-backed i-Soon "secret" APT and APT27, the latter implicated in January's Treasury breach.

Women Faced the Brunt of Cybersecurity Cutbacks in 2024

by Kristina Beek, Associate Editor, Dark Reading / 7d

Many women are finding that they are unhappy in their cybersecurity roles, largely due to the layoffs their companies are experiencing, cutbacks, and return to in-office work policies.

Enterprise AI Through a Data Security Lens: Balancing Productivity With Safety

by Adam Strange / 7d

Recently, 57 countries signed an agreement pledging an "open" and "inclusive" approach to AI's development. The US and UK were not among them, with the US vice president implying productivity should be the priority over safety. Should the opportunity for AI to drive innovation and productivity be prioritized over safety and security?

CISA Cuts: A Dangerous Gamble in a Dangerous World

by Steve Durbin / 8d

The Cybersecurity and Infrastructure Security Agency's role in risk management needs to expand, not shrink.

Deepfake Videos of YouTube CEO Phish Creators

YouTube warns of deepfake phishing

•

by Kristina Beek, Associate Editor, Dark Reading / 8d

YouTube creators are being targeted by scammers seeking out their credentials, using deepfake tactics to lure them in with a false sense of legitimacy.

Cybersecurity's Future Is All About Governance, Not More Tools

by Shirley Salzman / 8d

As CISOs take a seat at the boardroom table, the focus shifts from stacking security tools to driving accountability, efficiency, and strategic risk management.