"What CISA's Red Team disarray means fro US cyber defense."

Views expressed in this cybersecurity, cyber crime update are those of the reporters and correspondents.  Accessed on 23 March 2025, 1403 UTC.

Content and Source:  Email subscription via https://feedly.com.

 https://feedly.com/i/subscription/feed%2Fhttp%3A%2F%2Fwww.darkreading.com%2Frss%2Fall.xml

Please check link or scroll down to read your selections.  Thanks for joining us today.

Russ Roberts (https://www.hawaiicybersecurityjournal.net).

Dark Reading

165K followers37 articles per week

#security#tech

29

Most popular

What CISA's Red Team Disarray Means for US Cyber Defenses

CISA faces staff and funding cuts

•

23by Becky Bracken, Senior Editor, Dark Reading / 1d

DOGE is making wild moves at CISA, including bringing back fired probationary employees only to put them on paid leave, and reportedly gutting the agency's red teams.

Why Cybersecurity Needs More Business-Minded Leaders

by Victoria Dimmick / 4d

The question is no longer "Are we compliant?" but "Are we truly resilient?"

Critical Fortinet Vulnerability Draws Fresh Attention

10 TTPs

•

by Jai Vijayan, Contributing Writer / 3d

CISA this week added CVE-2025-24472 to its catalog of known exploited vulnerabilities, citing ransomware activity targeting the authentication bypass flaw.

Mar 21, 2025

Attackers Pivot to SEMrush Spoof to Steal Google Credentials

8 TTPs

•

by Kristina Beek, Associate Editor, Dark Reading / 1d

•

Semrush impersonation scam targets Google

The attackers are taking an indirect approach to targeting SEO professionals and their Google credentials, using a fake digital marketing website.

Nation-State 'Paragon' Spyware Infections Target Civil Society

Paragon spyware scandal expands in Italy

•

by Nate Nelson, Contributing Writer / 1d

Law enforcement entities in democratic states have been deploying top-of-the-line messaging app spyware against journalists and aid workers.

Why Cyber Quality Is the Key to Security

by António Vasconcelos / 2d

The time to secure foundations, empower teams, and make cyber resilience the standard is now — because the cost of waiting is far greater than the investment in proactive security.

University Competition Focuses on Solving Generative AI Challenges

by Arielle Waldman / 2d

The Amazon Nova AI Challenge puts student research to the test and aims to bring a new perspective to challenges arising from the increase in AI-assisted software development.

Mar 20, 2025

VexTrio Using 20,000 Hacked WordPress Sites in Traffic Redirect Scheme

3 TTPs

•

by Alexander Culafi, Senior News Writer, Dark Reading / 2d

•

DollyWay compromises 20000 WordPress sites

A massive cybercrime network known as "VexTrio" is using thousands of compromised WordPress sites to funnel traffic through a complex redirection scheme.

Why It's So Hard to Stop Rising Malicious TDS Traffic

10 TTPs

•

by Rob Wright / 2d

Cybersecurity vendors say threat actors' abuse of traffic distribution systems (TDS) is becoming more complex and sophisticated — and much harder to detect and block.

Ukraine Defense Sector Under Attack via Dark Crystal RAT

5 TTPs

•

by Kristina Beek, Associate Editor, Dark Reading / 2d

•

Signal exploited for targeted malware attacks

The UNC-200 threat group, active since last summer, has been utilizing the Signal messaging app to social engineer targets into downloading an infostealing remote access Trojan.

Cybercriminals Taking Advantage of 'Shadow' Alliances, AI

Organised crime evolving with AI

•

by Rob Wright / 2d

A Europol report says nation-state actors are increasingly working with organized crime networks to achieve geopolitical goals, including the destabilization of the EU.

HP Brings Quantum-Safe Encryption to Printers

HP launches quantum-resistant printers

•

by Jeffrey Schwartz / 2d

HP's 8000 Series enterprise and commercial printers, which include Color LaserJet Enterprise MFP 8801, Mono MFP 8601, and LaserJet Pro Mono SFP 8501, will feature new quantum ASICs and endpoint controllers to protect them from future quantum attacks.

Are We Closing the Gender Gap in Cybersecurity?

by Sharon Shochat / 2d

Answer: Nope. But let's look at the trends — because they matter for security.

Mobile Jailbreaks Exponentially Increase Corporate Risk

by Nate Nelson, Contributing Writer / 3d

Both Android devices and iPhones are 3.5 times more likely to be infected with malware once "broken" and 250 times more likely to be totally compromised, recent research shows.

Mar 19, 2025

India Is Top Global Target for Hacktivists, Regional APTs

by Robert Lemos, Contributing Writer / 3d

Global politics and a growing economy draw the wrong kind of attention to India, with denial-of-service and application attacks both on the rise.

Cytex Unveils AICenturion

Cytex launches AICenturion LLM firewall

•

3d

[no content]

Nation-State Groups Abuse Microsoft Windows Shortcut Exploit

4 TTPs

•

by Alexander Culafi, Senior News Writer, Dark Reading / 3d

Trend Micro uncovered a method that nation-state threat actors are using to target victims via the Windows .Ink shortcut file extension.

Enterprises Gain Control Over LLM Oversharing With Prompt Security's GenAI Authorization

3d

[no content]

Infosys Settles $17.5M Class Action Lawsuit After Sprawling Third-Party Breach

Infosys settles McCamish lawsuits for $17.5M

•

by Kristina Beek, Associate Editor, Dark Reading / 3d

Several major companies in the finance sector were impacted by the third-party breach, prompting them to notify thousands of customers of their compromised data.

Women in CyberSecurity and ISC2 Announce the WiCyS + ISC2 Certified in CybersecuritySM Certification Spring Camp

WiCyS ISC2 launch cybersecurity certification

•

3d

[no content]

AI Cloud Adoption Is Rife With Cyber Mistakes

AI cloud services face vulnerabilities

•

by Elizabeth Montalbano, Contributing Writer / 3d

Research finds that organizations are granting root access by default and making other big missteps, including a Jenga-like building concept, in deploying and configuring AI services in cloud deployments.

Mar 18, 2025

Knostic Nabs $11M to Eliminate Enterprise AI Data Leaks

4d

[no content]

Wireless Airspace Defense Firm Bastille Reveals Top Threats of 2025

4d

[no content]

Automox Demonstrates IT and Security Impact With Launch of Precision Analytics

4d

[no content]

Fujifilm Signs Strategic Collaboration Agreement With Amazon Web Services

4d

[no content]

Duke University & GCF Partner to Identify Pathways for Advancing Women's Careers in Cybersecurity

4d

[no content]

Google to Acquire Wiz for $32B in Multicloud Security Play

Google acquires Wiz for $32 billion

•

by Alexander Culafi, Senior News Writer, Dark Reading / 4d

The all-cash deal offers a path for Google to better support cloud customers who have assets spread across public environments, including Azure and others.

Microsoft Sounds Warning on Multifunctional 'StilachiRAT'

23 TTPs

•

by Jai Vijayan, Contributing Writer / 4d

•

StilachiRAT malware targets crypto wallets

The sneaky malware packs capabilities for system reconnaissance as well as credential and cryptocurrency theft.

Black Basta Leader in League With Russian Officials, Chat Logs Show

4 TTPs

•

by Kristina Beek, Associate Editor, Dark Reading / 4d

Though the chat logs were leaked a month ago, analysts are now seeing that Russian officials may have assisted Black Basta members, according to the shared messages.

End of feed