DarkReading.com

"Millions of hotel rooms worldwide vulnerable to door lock exploit."

Views expressed in this cybersecurity, cyber crime update are those of the reporters and correspondents.  Accessed on 30 March 2024, 1407 UTC.

Content and Source:  https://feedly.com/i/subscription/feed%2Fhttp%3A%2F%2Fwww.darkreading.com%2Frss%2Fall.xml/DarkReading.com.

Please scroll down to read your selections.  Thanks for joining us today.

Russ Roberts (https://www.hawaiicybersecurityjournal.net).

Dark Reading

148K followers51 articles per week#security#tech

40

MOST POPULAR

Millions of Hotel Rooms Worldwide Vulnerable to Door Lock Exploit

Hackers exploit hotel keycard locks

•

300+by Nate Nelson, Contributing Writer / 2d

Hotel locks have been vulnerable to cyber compromise for decades and are extending their run into the digital age.

Cloud Email Filtering Bypass Attack Works 80% of the Time

21by David Strom / 18h

A majority of enterprises that employ cloud-based email spam filtering services are potentially at risk, thanks to a rampant tendency to misconfigure them.

Cisco IOS Bugs Allow Unauthenticated, Remote DoS Attacks

Cisco patches DoS vulnerabilities

•

22by Becky Bracken, Senior Editor, Dark Reading / 1d

Several Cisco products, including IOS, IOS XE, and AP software, need patching against various high-risk security vulnerabilities.

YESTERDAY

Are You Affected by the Backdoor in XZ Utils?

Backdoor discovered in xz utility

•

by Dark Reading Staff / 15h

In this Tech Tip, we outline how to check if a system is impacted by the newly discovered backdoor in the open source xz compression utility.

CISO Corner: Cyber-Pro Swindle; New Faces of Risk; Cyber Boosts Valuation

by Tara Seals, Managing Editor, News, Dark Reading / 17h

Our collection of the most relevant reporting and industry perspectives for those guiding cybersecurity strategies and focused on SecOps. Also included: Australia gets its cyber-groove back, and 2023's zero-day field day.

UN Peace Operations Under Fire From State-Sponsored Hackers

by Becky Bracken, Senior Editor, Dark Reading / 17h

The international body isn't doing enough to protect details on dissidents and activists gathered by peacekeeping operations, particularly across Central Africa.

Lessons From the LockBit Takedown

by Aaron Walton / 18h

The truly satisfying law enforcement takedown of the ransomware giant shows the value of collaborating — and fighting back.

TheMoon Malware Rises Again with Malicious Botnet for Hire

by Dark Reading Staff / 19h

Outdated SOHO routers and IoT devices being hijacked by TheMoon to operate an anonymous hacker botnet service called Faceless.

Geopolitical Conflicts: 5 Ways to Cushion the Blow

by Steve Durbin / 1d

By prioritizing key areas, security leaders can navigate the complexities of geopolitical conflicts more effectively.

Iran's Evolving Cyber-Enabled Influence Operations to Support Hamas

by Microsoft Security / 1d

Understanding Iran's techniques, coupled with comprehensive threat intel, can give organizations an edge in identifying and defending against these attacks.

MAR 28, 2024

Pervasive LLM Hallucinations Expand Code Developer Attack Surface

by Jai Vijayan, Contributing Writer / 1d

The tendency of popular AI-based tools to recommend nonexistent code libraries offers a bigger opportunity than thought to distribute malicious packages.

Indian Government, Oil Companies Breached by 'HackBrowserData'

by Dark Reading Staff / 1d

The malicious actor used Slack channels as an exfiltration point to upload the stolen data.

Suspected MFA Bombing Attacks Target Apple iPhone Users

Apple users targeted by cyberattacks

•

21by Jai Vijayan, Contributing Writer, Elizabeth Montalbano, Contributing Writer / 1d

Several Apple device users have experienced recent incidents where they have received incessant password reset prompts and vishing calls from a number spoofing Apple's legitimate customer support line.

US Puts Up $10M Bounty on BlackCat Ransomware Gang Members

by Dark Reading Staff / 1d

Feds are offering cash for information to help them crack down on the ransomware-as-a-service group's cyberattacks against US critical infrastructure.

3 Strategies to Future-Proof Data Privacy

by Chad Tindel / 2d

To meet changing privacy regulations, regularly review data storage strategies, secure access to external networks, and deploy data plane security techniques.

Corporations With Cyber Governance Create Almost 4X More Value

by David Strom / 2d

Those with special committees that include a cyber expert rather than relying on the full board are more likely to improve security and financial performance.

10 Steps to Detect, Prevent, and Remediate the Terrapin Vulnerability

by Dotan Nahum / 2d

You don't have to stop using SSH keys to stay safe. This Tech Tip explains how to protect your system against CVE-2023-48795.

A CISO's Guide to Materiality and Risk Determination

by Peter Dyson / 2d

For many CISOs, "materiality" remains an ambiguous term. Even so, they need to be able to discuss materiality and risk with their boards.