Avatar
Dark Reading
f9e52ebe8a51b90fdaacc735e822d6ee358d91dad406768f80af646b7c85d797
Dark Reading: Connecting the Information and Security Community

Time to Secure Cloud-Native Apps Is Now

While the challenges and risks associated with securing cloud-native environments are significant, with the right security measures and a focus on cybersecurity basics, organizations can effectively s...

https://www.darkreading.com/cloud-security/time-to-secure-cloud-native-apps-is-now

Days After Google, Apple Reveals Exploited Zero-Day in Browser Engine

The new bug is Apple's 12th WebKit zero-day in the last year, highlighting the increasing enterprise exposure to browser-borne threats.

https://www.darkreading.com/cyberattacks-data-breaches/days-after-google-apple-discloses-actively-exploited-0-day-in-its-browser-engine

Apple's Anti-Theft Security Slows Down iPhone Crooks

The new iOS update includes Stolen Device Protection which limits what users can do on their iPhones when away from known locations (such as home or work), to prevent criminals from making unauthorize...

https://www.darkreading.com/endpoint-security/apple-adds-device-security-to-protect-from-thieves-

US, UK, AU Officials Sanction 33-Year-Old Russian Medibank Hacker

Aleksandr Ermakov, alongside other members of the REvil ransomware gang, are responsible for one of the biggest cyberattacks in Australia's history.

https://www.darkreading.com/cyberattacks-data-breaches/us-uk-au-officials-sanction-russian-medibank-hacker

MacOS Malware Targets Bitcoin, Exodus Cryptowallets

The malware substitutes genuine apps with compromised versions, enabling attackers to pilfer credentials and recovery phrases, thus gaining access to wallets and their contents.

https://www.darkreading.com/application-security/macos-malware-targets-bitcoin-exodus-cryptowallets

Subway Puts a LockBit Investigation on the Menu

The foot-long sandwich purveyor is looking into LockBit 3.0 claims that it stole reams of data from the proprietary "SBS" network.

https://www.darkreading.com/cyberattacks-data-breaches/subway-lockbit-investigation-on-menu

SEC Says SIM Swap to Blame for Breached X Account

Crypto hackers gained control of a phone number associated with the government agency's account after MFA was disabled in July.

https://www.darkreading.com/endpoint-security/sec-sim-swap-to-blame-breached-x-account

Millions at Risk As 'Parrot' Web Server Compromises Take Flight

The cyberattackers behind the traffic redirection system (TDS) inject websites with malicious scripts, have control over thousands of servers worldwide, and have ramped up efforts to avoid detection.

https://www.darkreading.com/endpoint-security/millions-at-risk-parrot-web-server-compromises

CISA Director Jen Easterly Targeted in Swatting Incident

A phone call to authorities claimed that a shooting had taken place on Easterly's block.

https://www.darkreading.com/vulnerabilities-threats/cisa-director-jen-easterly-targeted-in-swatting-incident

Google-Backed Israeli University Launches Cyber-Analyst Course

Backed by PwC Next, the program offers tailored cybersecurity training in an effort to better defend the nation against increased attacks.

https://www.darkreading.com/cybersecurity-operations/google-backed-israeli-university-launches-cyber-analyst-course

Magecart Adds Middle East Retailers to Long List of Victims

Cybercriminals who conspire to put credit-card skimmers on e-commerce sites have hit some large vendors in the region.

https://www.darkreading.com/vulnerabilities-threats/magecart-adds-middle-east-retailers-to-long-list-of-victims

AI Program Poised to Advance Cybersecurity in Abu Dhabi

The nation's new AI council will be responsible for developing policies and strategies related to research, infrastructure, and investments in AI.

https://www.darkreading.com/application-security/abu-dhabi-forms-ai-council-to-advance-tech-ambitions

Learning From Ukraine's Pioneering Approaches to Cybersecurity

Ukraine's tactical and strategic cybersecurity approach in the intense warfare environment offers a blueprint for organizations aiming to fortify their cyber defenses.

https://www.darkreading.com/cyberattacks-data-breaches/learning-ukraines-pioneering-approaches-cybersecurity

Move Fast and Break the Enterprise With AI

The tantalizing promise of true artificial intelligence, or at least decent machine learning, has whipped into a gallop large organizations not built for speed.

https://www.darkreading.com/cyber-risk/move-fast-and-break-the-enterprise-with-ai

'VexTrio' TDS: The Biggest Cybercrime Operation on the Web?

The traffic distribution system supports tens of thousands of malicious domains and cyberattack campaigns that reach far and wide globally.

https://www.darkreading.com/threat-intelligence/vextrio-tds-biggest-cybercrime-operation-web

Godzilla Web Shell Attacks Stomp on Critical Apache ActiveMQ Flaw

Thousands of vulnerable servers may be open to cyberattacks exploiting the max-severity CVE-2023-46604 bug.

https://www.darkreading.com/threat-intelligence/godzilla-web-shell-attacks-stomp-critical-apache-activemq-flaw