DarkReading.com

"Commercial spyware vendors have a copycat in top Russian APT."

Views expressed in this cybersecurity, cyber crime update are those of the reporters and correspondents.  Accessed on 31 August 2024, 0313 UTC.

Content and Source:  Email subscription via https://feedly.com.   https://feedly.com/i/subscription/feed%2Fhttp%3A%2F%2Fwww.darkreading.com%2Frss%2Fall.xml

Please check link or scroll down to read your selections.  Thanks for joining us today.

Russ Roberts (https://www.hawaiicybersecurityjournal.net).

Dark Reading

155K followers45 articles per week#security#tech

17

Today

Commercial Spyware Vendors Have a Copycat in Top Russian APT

IoC > 2 domains

•

by Dark Reading Staff / 9h

•

3 TTPs

•

CVE-2023-41993

Russia's Midnight Blizzard infected Mongolian government websites to try to compromise the devices of visitors, using watering-hole tactics.

'Voldemort' Malware Curses Orgs Using Global Tax Authorities

14 TTPs

•

by Nathan Eddy, Contributing Writer / 10h

The global malware campaign (that must not be named?) is targeting organizations by impersonating tax authorities, and using custom tools like Google Sheets for command and control.

Commercial Spyware Vendors Have a Copycat in Top Russian APT

IoC > 2 domains

•

by Dark Reading Staff / 10h

•

3 TTPs

Russia's Midnight Blizzard infected Mongolian government websites to try to compromise the devices of visitors, using watering-hole tactics.

NASA Focuses on Cybersecurity of its Mission-Critical Software

by Jennifer Lawinski, Contributing Writer / 11h

The software verification and validation efforts helps NASA improve the safety and cost-effectiveness of its mission critical software. Cybersecurity is now part of the evaluation.

Why Identity Teams Need to Start Reporting to the CISO

by John Paul Cunningham / 13h

Identity management sits with IT for good reason, but now that identity is the common denominator in every attack, it's time identity security was owned by a leader with a security background, like the CISO.

Check Point, Cisco Boost AI Investments with Latest Deals

Cisco acquires Robust Intelligence for AI

•

by Jeffrey Schwartz, Contributing Writer / 15h

Cisco's deal to acquire Robust Intelligence will make it possible to use red team algorithms to assess risk in AI models and applications, while Check Point’s acquisition of Cyberint will add threat intelligence to its SOC platform.

Yesterday

Cyber Insurance: A Few Security Technologies, a Big Difference in Premiums

by Robert Lemos, Contributing Writer / 1d

Ransomware attacks and email-based fraud account for 80% to 90% of all claims processed by cyber insurers, but a handful of cybersecurity technologies can help prevent big damages.

Iran's 'Fox Kitten' Group Aids Ransomware Attacks on US Targets

8 TTPs

•

by Jai Vijayan, Contributing Writer / 1d

In a joint advisory, CISA and the FBI described the activity as a likely attempt by the group to monetize access to networks it already has compromised.

Cobalt Appoints Sonali Shah as CEO

1d

[no content]

AuthenticID Unveils Enhanced Smart ReAuth™ for Instant Biometric Reauthentication

AuthenticID launches Smart ReAuth solution

•

1d

[no content]

Brazilian Ad Fraud Network 'Camu' Hits 2B+ Daily Bid Requests

by Nate Nelson, Contributing Writer / 1d

The global Internet helps just about everything to scale more easily, including piracy and ad fraud.

SANS Institute Unveils Critical Infrastructure Strategy Guide for 2024

1d

[no content]

Top Travel Sites Have Some First-Class Security Issues to Clean Up

Cybercriminals target travel websites

•

200+by Elizabeth Montalbano, Contributing Writer / 1d

Public-facing vulnerabilities, cloud sprawl, access to back-end servers are just a few of the challenges travel and hospitality companies must address.

CISA Highlights Apache OFBiz Flaw After PoC Open Access

4 TTPs

•

by Kristina Beek, Associate Editor, Dark Reading / 1d

The vulnerability carries nearly the highest score possible on the CVSS scale, at 9.8, impacting a system used by major companies around the world.

How Telecom Vulnerabilities Can Be a Threat to Cybersecurity Posture

by Ayan Halder / 1d

Telecom-based attacks such as SMS toll fraud and 2FA hijacking have evolved into a mainstream concern for CISOs.

Dragos Expands Asset Visibility in Latest Platform Update

Dragos updates platform for OT security

•

by Dark Reading Staff / 1d

The latest release of the Dragos Platform provide industrial and critical infrastructure organizations with complete and enriched view of their OT environment.

News Desk 2024: Hacking Microsoft Copilot Is Scary Easy

Microsoft 365 Copilot vulnerability fixed

•

by Becky Bracken, Senior Editor, Dark Reading / 1d

As enterprises in the world embrace Microsoft's AI assistant, researcher Michael Bargury warns its security is lacking. Check out his News Desk interview during Black Hat USA.

End of feed