"SIEMS missing the mark on MITRE ATT& CK Techniques."

Views expressed in this cybersecurity, cyber crime update are those of the reporters and correspondents.  Accessed on 09 June 2025, 2108 UTC.

Content and Source:  "Dark Reading."

Content provided by email subscription via https://feedly.com.

 https://feedly.com/i/subscription/feed%2Fhttp%3A%2F%2Fwww.darkreading.com%2Frss%2Fall.xml.

Please check email link or scroll down to read your selections.  Thanks for joining us today.

Russ Roberts (https://www.hawaiicybersecurityjournal.net).

Dark Reading

139K followers36 articles per week

#security#tech

78

Today

SIEMs Missing the Mark on MITRE ATT&CK Techniques

by Kristina Beek, Associate Editor, Dark Reading / 1h

CardinalOps' report shows that organizations are struggling to keep up with the evolution of the latest threats while a significant number of detection rules remain non-functional.

China-Backed Hackers Target SentinelOne in 'PurpleHaze' Attack Spree

2 TTPs

•

by Elizabeth Montalbano, Contributing Writer / 6h

•

GLIB-2-0

Known threat groups APT15 and UNC5174 unleashed attacks against SentinelOne and more than 70 other high-value targets, as part of ongoing cyber-espionage and other malicious activity involving ShadowPad malware.

Next-Gen Developers Are a Cybersecurity Powder Keg

by Pieter Danhieux / 6h

AI coding tools promise productivity but deliver security problems, too. As developers embrace "vibe coding," enterprises face mounting risks from insecure code generation that security teams can't keep pace with.

Jun 6, 2025

Docuseries Explores Mental, Physical Hardships of CISOs

by Arielle Waldman / 3d

During "CISO: The Worst Job I Ever Wanted," several chief information security officers reveal how difficult it is to be in a role that, despite being around for decades, remains undefined.

Cutting-Edge ClickFix Tactics Snowball, Pushing Phishing Forward

19 TTPs

•

by Tara Seals / 3d

•

ClickFix exploits users via deception

Several widespread ClickFix campaigns are underway, bent on delivering malware to business targets, and they represent a new level of phishing sophistication that defenders need to be prepared for, researchers warn.

F5 Acquires Agentic AI Security Startup Fletch

F5 acquires Fletch for AI security

•

by Jeffrey Schwartz / 3d

Agentic AI technology will be integrated into the recently launched F5 Application Delivery and Security Platform.

BADBOX 2.0 Targets Home Networks in Botnet Campaign, FBI Warns

BADBOX 2.0 malware infects millions

•

by Kristina Beek, Associate Editor, Dark Reading / 3d

Though the operation was partially disrupted earlier this year, the botnet remains active and continues to target connected Android devices.

Synthetic Data Is Here to Stay, but How Secure Is It?

by Hadi Chami / 3d

Synthetic data offers organizations a way to develop AI while maintaining privacy compliance but requires careful management to prevent re-identification risks and ensure model accuracy.

MSFT-CrowdStrike 'Rosetta Stone' for Naming APTs: Meh?

3 TTPs

•

by Robert Lemos, Contributing Writer / 3d

•

CrowdStrike Microsoft unify cyber threat

Microsoft and CrowdStrike announced an effort to deconflict the overlapping names of threat groups and reduce confusion for companies, but we've been here before.

Prep for Layoffs Before They Compromise Security

by Mercedes Cardona / 3d

Mass layoffs create cybersecurity vulnerabilities through dormant accounts and disgruntled employees.

Jun 5, 2025

SecOps Teams Need to Tackle AI Hallucinations to Improve Accuracy

by Arielle Waldman / 3d

The risks associated with AI embedded into threat detection and response tools can't be completely eradicated, but SecOps teams can take steps to at least limit the effects.

'PathWiper' Attack Hits Critical Infrastructure In Ukraine

5 TTPs

•

by Rob Wright / 3d

•

PathWiper malware targets Ukraine infrastructure

Cisco Talos researchers observed the new wiper malware in a destructive attack against an unnamed critical infrastructure organization.

Digital Forensics Firm Cellebrite to Acquire Corellium

Cellebrite acquires Corellium for $170M

•

by Alexander Culafi, Senior News Writer, Dark Reading / 3d

Cellebrite, a controversial digital forensics firm, is set to acquire virtualization vendor Corellium in a $170 million deal.

Cisco Warns of Credential Vuln on AWS, Azure, Oracle Cloud

3 TTPs

•

by Kristina Beek, Associate Editor, Dark Reading / 4d

•

CVE-2025-20286

The vulnerability, with a 9.9 CVSS score on a 10-point scale, results in different Cisco ISE deployments all sharing the same credentials as long as the software release and cloud platform remain the same.

Backdoored Malware Reels in Newbie Cybercriminals

IoC > 2 domains

•

by Kristina Beek, Associate Editor, Dark Reading / 4d

•

Malicious GitHub campaign spreads backdoors

Sophos researchers found this operation has similarities or connections to many other campaigns targeting GitHub repositories dating back to August 2022.

Vishing Crew Targets Salesforce Data

8 TTPs

•

by Jai Vijayan, Contributing Writer / 4d

•

Vishing attacks target Salesforce customers

A group that Google is tracking as UNC6040 has been tricking users at many organizations into installing a malicious version of a Salesforce app to gain access and steal data from the platform.

Questions Swirl Around ConnectWise Flaw Used in Attacks

by Rob Wright / 4d

ConnectWise issued a patch to stave off attacks on ScreenConnect customers, but the company's disclosures don't explain what the vulnerability is and when it was first exploited.

Finding Balance in US AI Regulation

by John Hurley / 4d

The US can't afford to wait for political consensus to catch up to technological change.

Jun 4, 2025

Iranian APT 'BladedFeline' Hides in Network for 8 Years

by Alexander Culafi, Senior News Writer, Dark Reading / 4d

ESET published research on the Iranian APT "BladedFeline," which researchers believe is a subgroup of the cyber-espionage entity APT34.

Cybersecurity Training in Africa Aims to Bolster Professionals' Ranks

by Robert Lemos, Contributing Writer / 4d

The United Nations, Carnegie Mellon University, and private organizations are all aiming to train the next generation of cybersecurity experts, boost economies, and disrupt pipelines to armed groups.

35K Solar Devices Vulnerable to Potential Hijacking

by Kristina Beek, Associate Editor, Dark Reading / 4d

A little more than three-quarters of these exposed devices are located in Europe, followed by Asia, with 17%.

Vishing Crew Targets Salesforce Data

8 TTPs

•

by Jai Vijayan, Contributing Writer / 5d

•

Vishing attacks target Salesforce customers

A group Google is tracking as UNC6040 has been tricking users into installing a malicious version of a Salesforce app to gain access to and steal data from the platform.

How Neuroscience Can Help Us Battle 'Alert Fatigue'

by Boaz Barzel / 5d

By understanding the neurological realities of human attention, organizations can build more sustainable security operations that protect not only their digital assets but also the well-being of those who defend them.

Researchers Bypass Deepfake Detection With Replay Attacks

6 TTPs

•

by Alexander Culafi, Senior News Writer, Dark Reading / 5d

•

Replay attacks bypass deepfake detection

An international group of researchers found that simply rerecording deepfake audio with natural acoustics in the background allows it to bypass detection models at a higher-than-expected rate.

Attackers Impersonate Ruby Packages to Steal Sensitive Telegram Data

9 TTPs

•

by Elizabeth Montalbano, Contributing Writer / 5d

•

Malicious RubyGems steal Telegram data

Malicious RubyGems pose as a legitimate plug-in for the popular Fastlane rapid development platform in a geopolitically motivated attack with global supply chain reach.

Beware of Device Code Phishing

11 TTPs

•

by Stu Sjouwerman / 5d

Hackers are exploiting trusted authentication flows — like Microsoft Teams and IoT logins — to trick users into handing over access tokens, bypassing MFA and slipping undetected into corporate networks.

How to Approach Security in the Era of AI Agents

by Chris Betz / 5d

Organizations need to implement these five essential security controls to safely harness the power of autonomous AI agents while still protecting enterprise assets.

Jun 3, 2025

LayerX Launches ExtensionPedia

5d

[no content]

TXOne Networks Introduces Capability for Intelligent Vulnerability Mitigation

TXOne SageOne enhances vulnerability mitigation

•

5d

[no content]

'Crocodilus' Sharpens Its Teeth on Android Users

Crocodilus malware targets global banking users

•

by Jai Vijayan, Contributing Writer / 5d

The data-stealing malware initially targeted users in Turkey but has since evolved into a global threat.

Victoria's Secret Delays Earnings Call Due to Cyber Incident

Victoria's Secret website down due to security

•

by Kristina Beek, Associate Editor, Dark Reading / 6d

But that didn't stop the clothing retailer from issuing preliminary results for the first quarter of 2025.

Chrome Drops Trust for Chunghwa, Netlock Certificates

Chrome distrusts Chunghwa Telecom Netlock

•

by Elizabeth Montalbano, Contributing Writer / 6d

Digital certificates authorized by the authorities will no longer have trust by default in the browser starting in August, over what Google said is a loss of integrity in actions by the respective companies.

LummaC2 Fractures as Acreed Malware Becomes Top Dog

4 TTPs

•

by Kristina Beek, Associate Editor, Dark Reading / 6d

•

Microsoft dismantles Lumma infostealer malware

LummaC2 formerly accounted for almost 92% of Russian Market's credential theft log alerts. Now, the Acreed infostealer has replaced its market share.

Chrome Drops Trust for Chunghwa, Netlock Certificates

Chrome distrusts Chunghwa Telecom Netlock

•

by Elizabeth Montalbano, Contributing Writer / 6d

Digital certificates authorized by the authorities will no longer have trust by default in the browser starting in August, over what Google said is a loss of integrity in actions by the respective companies.

LummaC2 Fractures as Acreed Malware Becomes Top Dog

4 TTPs

•

by Kristina Beek, Associate Editor, Dark Reading / 6d

•

Microsoft dismantles Lumma infostealer malware

LummaC2 formerly accounted for almost 92% of Russian Market's credential theft log alerts. Now, the Acreed infostealer has replaced its market share.

Beyond the Broken Wall: Why the Security Perimeter Is Not Enough

by Tim Freestone / 6d

Organizations need to abandon perimeter-based security for data-centric protection strategies in today's distributed IT environments.

Is Your CISO Navigating Your Flight Path?

by Richard Marcus / 6d

If your CISO isn't wielding influence with the CEO and helping top leaders clearly see the flight path ahead, your company is dangerously exposed.

Open-Weight Chinese AI Models Drive Privacy Innovation in LLMs

by Laura Koetzle, Omer Akgul / 6d

Edge computing and stricter regulations could usher in a new era of AI privacy.