Dark Reading Daily -- January 06, 2023

200M Twitter Profiles, With Email Addys, Dumped on Dark Web for Free

A data dump of Twitter user details on an underground forum appears to stem from an API endpoint compromise and large-scale data scraping.

Rackspace Sunsets Email Service Downed in Ransomware Attack

The hosting services provider shared new details on the breach that took down its Hosted Exchange Email service.

Bluebottle Continues Bank Heist Assault With Signed Malware

The financially motivated threat group, also known as OPERA1ER, demonstrated an evolution in tactics in its compromise of three Francophone financial institutions in Africa, likely adding to its $11 million to-date haul.

Space Race: Defenses Emerge as Satellite-Focused Cyberattacks Ramp Up

Amid escalating cyber activity, two separate cybersecurity frameworks are targeting the satellite arena, highlighting the ease in attacking the infrastructure and the difficulty in defending it.

CircleCI: Rotate Stored Secrets ASAP

DevOps platform warns customers of a "security incident" under investigation.

How to Ensure Cybersecurity Investments Remain a Priority Across Your Organization

Collaboration across all business units is key to building a robust cybersecurity program.

Cyberattackers Torch Python Machine Learning Project

The popular PyTorch Python project for data scientists and machine learning developers has become the latest open source project to be targeted with a dependency confusion attack.

Raspberry Robin Worm Hatches a Highly Complex Upgrade

The Evil Corp-linked malware family has undergone an evolution, becoming more obfuscated and "several times more complex," as the group behind it tests how far the worm can be spread.

Understanding Infrastructure-as-Code Risks in the Cloud

Improve overall IT administration and establish a framework to identify misconfigurations and automate the process of checking IaC before it makes it into the production environment.

Five Guys Data Breach Puts HR Data Under a Heat Lamp

Job applicants could face a raft of follow-on attacks after cyber intruders accessed their data in an opportunistic attack.

LATEST FROM THE EDGE

How Confidential Computing Can Change Cybersecurity

Encrypting data while in use, not just in transit and at rest, closes one more avenue of cyberattack.

LATEST FROM DR TECHNOLOGY

Threat Actors Evade Detection Through Geofencing & Fingerprinting

Security teams may be missing targeted attacks and advanced exploits if attackers are using evasive techniques to avoid detection. Defenders need to up their game.

The Promise and Reality of Cloud Security