Dark Reading Daily -- June 16, 2022

24+ Billion Credentials Circulating on the Dark Web in 2022 — So Far

Username and password combinations offered for sale on the Dark Web by criminals has increased 65% since 2020.

'Hertzbleed' Side-Channel Attack Threatens Cryptographic Keys for Servers

A novel timing attack allows remote attackers with low privileges to infer sensitive information by observing power-throttling changes in the CPU.

Wormable Panchan Peer-to-Peer Botnet Harvests Linux Server Keys

The Japanese-language Panchan botnet has been discovered stealing SSH keys from Linux servers across Asia, Europe, and North America, with a focus on telecom and education providers.

Cybercriminals Capitalizing on Resurgence in Travel

Multiple cybercrime groups have been spotted selling stolen credentials and other sensitive personal information pilfered from travel-related websites.

Critical Citrix Bugs Impact All ADM Servers, Agents

Citrix ADM vulnerabilities could lead to admin password reset and disruption of ADM license service, company warns.

Why We Need Security Knowledge and Not Just Threat Intel

Organizations that can break out of siloed data and apply context can transform intelligence into actionable, relevant security knowledge.

How Information Security Teams Can Help Reduce Stress and Burnout

Work across the organization and take practical steps to ease user stress — prioritize user productivity by offering the right tools to avoid shadow IT and cultivate a transparent security culture. Remember the security team, too, and automate as many processes as possible.

Thousands Arrested in Global Raids on Social-Engineering Scammers

Interpol says it busted fraudsters who were operating call centers for romance scams, get-rich-quick schemes, and more.

CISA Recommends Organizations Update to the Latest Version of Google Chrome

Google last week reported seven vulnerabilities in the browser, four of which it rated as high severity.

In Case You Missed RSA Conference 2022: A News Digest

Here's a rundown of Dark Reading's reporting and commentary from and surrounding the first in-person RSA Conference since the pandemic began in 2020.

Understanding and Mitigating Single Sign-on Risk

SSO's one-to-many architecture is both a big advantage and a weakness.

Microsoft Patches 'Follina' Zero-Day Flaw in Monthly Security Update

Here are which Microsoft patches to prioritize among the June Patch Tuesday batch.

LATEST FROM THE EDGE

How Should I Think About Security When Considering Digital Transformation Projects?

Digital transformation helps businesses keep operating and to stay competitive. Here are the ways to think about security so that businesses reap the benefits without taking on associated risks.

LATEST FROM DR TECHNOLOGY

7 Ways to Bring AI to Cybersecurity

Academic researchers are developing projects to apply AI to detect and stop cyberattacks and keep critical infrastructure secure, thanks to grants from C3.ai Digital Transformation Institute.

What Every Enterprise Should Know About Security Product Testing