'Whiffy Recon' Malware Transmits Device Location Every 60 Seconds
Deployed by the infamous SmokeLoader botnet, the location-tracking malware could be used for a host of follow-on cyberattacks or even physical targeting.
NIST Publishes First Draft Standards for Post-Quantum Cryptography
Publication of the first draft PQC standards opens a 90-day period for public comment and paves the way for interoperability testing.
Is Bias in AI Algorithms a Threat to Cloud Security?
Using AI for threat detection and response is essential — but it can't replace human intelligence, expertise, and intuition.
https://www.darkreading.com/cloud/is-bias-in-ai-algorithms-a-threat-to-cloud-security
Cerby Announces $17M in Series A Funding to Secure Nonstandard Applications
Critical Insight Releases H1 2023 Report
https://www.darkreading.com/operations/critical-insight-releases-h1-2023-report
Malwarebytes Announces Acquisition of Online Privacy Company Cyrus
Black Hat USA 2023 Closes on Record-Breaking Event in Las Vega
https://www.darkreading.com/edge/black-hat-usa-2023-closes-on-record-breaking-event-in-las-vega
Cypago Raises $13M and Unveils its Cyber GRC Automation (CGA) Platform to Simplify GRC Processes
US Space Industry More Prone to Foreign Espionage, US Agencies Warn
Foreign intelligence entities have the US space industry in their sights, posing serious threats to US national security, multiple federal agencies say.
Kyndryl and Cisco Expand Partnership Focusing on Cyber Resilience
Ransomware With an Identity Crisis Targets Small Businesses, Individuals
TZW is the latest version of Adhubllka, which has been active since 2019 but has gone largely unreported due to its lower ransom demands.
eBay Users Beware Russian 'Telekopye' Telegram Phishing Bot
Thanks to a simple Telegram bot that democratizes phishing, ordinary Russians can conduct full-fledged phishing attacks with zero technical knowhow.
https://www.darkreading.com/threat-intelligence/ebay-users-russian-telekopye-telegram-phishing-bot
What the Hive Ransomware Case Says About RaaS and Cryptocurrency
Hive tells us a lot about ransomware-as-a-service trends and the best ways to defend against attacks.
5 Best Practices for Implementing Risk-First Cybersecurity
Embracing a risk-first mindset empowers organizations to make informed decisions, strengthen security, safeguard valuable assets, and reduce financial impact.
https://www.darkreading.com/risk/5-best-practices-for-implementing-risk-first-cybersecurity
North Korea's Lazarus Group Used GUI Framework to Build Stealthy RAT
The world's most notorious threat actor is using an unprecedented tactic for sneaking spyware into the IT networks of important companies.
eSentire Labs Open Sources Project to Monitor LLMs
The eSentire LLM Gateway provides monitoring and governance of ChatGPT and other Large Language Models being used in the organization.
https://www.darkreading.com/dr-tech/esentire-labs-open-sources-project-to-monitor-llms
Prelude Security Tackles Continuous Security Testing in Containers
Probes are tiny processes which run inside containers and scan applications for vulnerabilities.
Ransomware Reaches New Heights
It's not going anywhere: Easy-to-exploit bugs like MOVEit, leaks of stolen data, and rapid-fire escalation are keeping ransomware attacks as painful as ever.
https://www.darkreading.com/threat-intelligence/ransomware-reaches-new-heights
Threat Actor Exploits Zero-Day in WinRAR to Target Crypto Accounts
Attacks targeting the now-patched bug have been going on since at least April 2023, security vendor says.
FBI Warns of Cryptocurrency Heists by North Korea's Lazarus Group
The most recent stolen bitcoin comes just after three major operations occurred in June, with millions stolen in each heist.