Ambitious Training Initiative Taps Talents of Blind and Visually Impaired
Novacoast's Apex Program prepares individuals with visual impairments for cybersecurity careers.
Frameworks, Guidelines & Bounties Alone Won't Defeat Ransomware
We need more than "do-it-yourself" approaches to threats that clearly rise to the level of national security issues.
Tips for Securing the Software Supply Chain
Industry experts share how to implement comprehensive security strategies necessary to secure the software supply chain in Dark Reading’s latest Tech Insights report.
https://www.darkreading.com/cyber-risk/tips-for-securing-the-software-supply-chain
Vietnamese Cybercrime Group CoralRaider Nets Financial Data
With a complex attack chain and using Telegram for its command and control, CoralRaider targets victims in Asian countries — and appears to have accidentally infected itself as well.
Software-Defined Vehicle Fleets Face a Twisty Road on Cybersecurity
As manufacturers sprint to add software-defined features for vehicles, the ability for third-party maintenance and repair falls behind, leaving businesses with few choices to manage their cybersecurit...
Home Depot Hammered by Supply Chain Data Breach
SaaS vendor to blame for exposing employee data that was ultimately leaked on Dark Web forum, according to the home improvement retailer.
Round 2: Change Healthcare Targeted in Second Ransomware Attack
RansomHub, which is speculated to have some connection to ALPHV, has stolen 4TB of sensitive data from the beleaguered healthcare company.
StrikeReady Raises $12M for AI Security Command Platform
Wyden Releases Draft Legislation to End Federal Dependence on Insecure, Proprietary Software
The Fight for Cybersecurity Awareness
Investing in cybersecurity skills creates a safer digital world for everyone.
https://www.darkreading.com/cybersecurity-operations/fight-for-cybersecurity-awareness
Solar Spider Spins Up New Malware to Entrap Saudi Arabian Financial Firms
An ongoing cyberattack campaign with apparent ties to China uses a new version of sophisticated JavaScript remote access Trojan JSOutProx and is now targeting banks in the Middle East.
Critical Bugs Put Hugging Face AI Platform in a 'Pickle'
One issue would have allowed cross-tenant attacks, and another enabled access to a shared registry for container images; exploitation via an insecure Pickle file showcases emerging risks for AI-as-a-s...
https://www.darkreading.com/cloud-security/critical-bugs-hugging-face-ai-platform-pickle
Panera Bread Fuels Ransomware Suspicions With Silence
The restaurant chain hasn't provided any information regarding what led to a widespread IT outage, and customers and employees are asking for answers.
How Do We Integrate LLMs Security Into Application Development?
Large language models require rethinking how to bake security into the software development process earlier.
CISO Corner: Ivanti's Mea Culpa; World Cup Hack; CISOs & Cyber Awareness
Our collection of the most relevant reporting and industry perspectives for those guiding cybersecurity strategies and focused on SecOps. Also included: Dealing with a Ramadan cyber spike; funding Int...
Magecart Attackers Pioneer Persistent E-Commerce Backdoor
The infamous payment-skimmer cybercrime organization is exploiting CVE-2024-20720 in Magento for a novel approach to stealing card data.
https://www.darkreading.com/cloud-security/magecart-attackers-pioneer-persistent-ecommerce-backdoor
White House's Call for Memory Safety Brings Challenges, Changes & Costs
Improving security in the applications that drive the digital economy is a necessary undertaking, requiring ongoing collaboration between the public and private sectors.
Reconsider Your CNAPP Strategy Using These 5 Scenarios
Cloud-native application protection platforms (CNAPPs) sidestep siloed security and embed security into the earliest stages of application development.
https://www.darkreading.com/cloud-security/reconsider-your-cnapp-strategy-using-these-5-scenarios
SEXi Ransomware Desires VMware Hypervisors in Ongoing Campaign
A Babuk variant has been involved in at least four attacks on VMware EXSi servers in the last six weeks, in one case demanding $140 million from a Chilean data center company.
https://www.darkreading.com/threat-intelligence/sexi-ransomware-desires-vmware-hypervisors
Malicious Latrodectus Downloader Picks Up Where QBot Left Off
Initial access brokers are using the new downloader malware, which emerged just after QBot's 2023 disruption.
https://www.darkreading.com/threat-intelligence/new-loader-takes-over-where-qbot-left-off