DarkReading.com

"CISA's Malware Analysis Platform could foster better threat intel."

Views expressed in this cybersecurity, cyber crime update are those of the reporters and correspondents.  Accessed on 14 April 2024, 1430 UTC.

Content and Source:  https://feedly.com/i/subscription/feed%2Fhttp%3A%2F%2Fwww.darkreading.com%2Frss%2Fall.xml/Dark Reading.com.

Please scroll down to read your selections.  Thanks for joining us today.

Russ Roberts (https://www.hawaiicybersecurityjournal.net).

Dark Reading

149K followers49 articles per week#security#tech

17

APR 12, 2024

CISA's Malware Analysis Platform Could Foster Better Threat Intel

CISA releases Malware Next-Gen system

•

by Jai Vijayan, Contributing Writer / 1d

But just how the government differentiates its platform from similar private-sector options remains to be seen.

New Tool Shields Organizations From NXDOMAIN Attacks

Akamai introduces Shield NS53 for DNS

•

by David Strom / 1d

Akamai joins a growing list of security vendors aiming to strengthen companies' DNS defenses.

CISO Corner: Securing the AI Supply Chain; AI-Powered Security Platforms; Fighting for Cyber Awareness

by Becky Bracken, Senior Editor, Dark Reading / 1d

Our collection of the most relevant reporting and industry perspectives for those guiding cybersecurity strategies and focused on SecOps. Also included: facing hard truths in software security, and the latest guidance from the NSA.

CISA Issues Emergency Directive After Midnight Blizzard Microsoft Hits

Password Spraying (Enterprise T1110.003)

•

by Kristina Beek, Associate Editor, Dark Reading / 1d

•

Federal government impacted by Russian breach of

Though Federal Civilian Executive Branch (FCEB) agencies are the primary targets, CISA encourages all organizations to up their security, given the high risk.

The Race for AI-Powered Security Platforms Heats Up

Simbian integrates AI into security

•

by Robert Lemos, Contributing Writer / 1d

Microsoft, Google, and Simbian each offers generative AI systems that allow security operations teams to use natural language to automate cybersecurity tasks.

Critical Infrastructure Security: Observations From the Front Lines

by Sean Tufts / 2d

Attacks on critical infrastructure are ramping up — but organizations now have the knowledge and tools needed to defend against them.

Knostic Brings Access Control to LLMs

Knostic raises $3.3M

•

by Fahmida Y. Rashid, Managing Editor, Features, Dark Reading / 2d

Led by industry veterans Gadi Evron and Sounil Yu, the new company lets organizations adjust how much information LLMs provide based on the user's role and responsibilities.

APR 11, 2024

Sisense Password Breach Triggers 'Ominous' CISA Warning

Sisense customers urged reset credentials

•

by Becky Bracken, Senior Editor, Dark Reading / 2d

With stores of mega-corporate business intelligence, a Sisense compromise could potentially mushroom into supply chain cyberattack disaster, experts fear.

DPRK Exploits 2 MITRE Sub-Techniques: Phantom DLL Hijacking, TCC Abuse

DLL Search Order Hijacking (Enterprise T1574.001)

•

by Nate Nelson, Contributing Writer / 2d

North Korean hackers break ground with new exploitation techniques for Windows and macOS.

Knostic Raises $3.3M for Enterprise GenAI Access Control

Knostic raises $3.3M

•

2d

[no content]

Cohesity Extends Collaboration to Strengthen Cyber Resilience With IBM Investment in Cohesity

Cohesity secures IBM funding

•

2d

[no content]

Critical Rust Flaw Poses Exploit Threat in Specific Windows Use Cases

3 TTPs

•

by Robert Lemos, Contributing Writer / 2d

•

CVE-2024-24576

Project behind the Rust programming language asserted that any calls to a specific API would be made safe, even with unsafe inputs, but researchers found ways to circumvent the protections.

DPRK Exploits 2 New MITRE Techniques: Phantom DLL Hijacking, TCC Abuse

DLL Search Order Hijacking (Enterprise T1574.001)

•

by Nate Nelson, Contributing Writer / 2d

North Korean hackers break ground with new exploitation techniques for Windows and macOS.

Expired Redis Service Abused to Use Metasploit Meterpreter Maliciously

by Elizabeth Montalbano, Contributing Writer / 2d

Attackers have compromised an 8-year-old version of the cloud platform to distribute various malware that can take over infected systems.

Apple Warns Users in 150 Countries of Mercenary Spyware Attacks

Apple warns of mercenary spyware attack in 91

•

by Dark Reading Staff / 2d

In new threat notification information, Apple singled out Pegasus vendor NSO Group as a culprit in mercenary spyware attacks.

Why MLBOMs Are Useful for Securing the AI/ML Supply Chain

by Diana Kelley / 3d

A machine learning bill of materials (MLBOM) framework can bring transparency, auditability, control, and forensic insight into AI and ML supply chains.

Zambia Busts 77 People in China-Backed Cybercrime Operation

Zambia arrests 77 in cybercrime

•

by Dark Reading Staff / 3d

Phony call center company conducted online fraud and other Internet scams.

END OF FEED