Dark Reading Daily -- July 18, 2023

5 Major Takeaways From Microsoft's July Patch Tuesday

July's updates contained 100+ patches and security policy notes, leaving vulnerability management teams stressed and scrambling to prioritize. We're here to help find some zen.

Microsoft 'Logging Tax' Hinders Incident Response, Experts Warn

A recent email compromise by Chinese APT group Storm-0558 highlights a lack of access to security logging by many Microsoft 365 license holders, prompting calls from researchers to abolish it.

How AI-Augmented Threat Intelligence Solves Security Shortfalls

Researchers explore how overburdened cyber analysts can improve their threat intelligence jobs by using ChatGPT-like large language models (LLMs).

AWS Cloud Credential Stealing Campaign Spreads to Azure, Google Cloud

The TeamTNT threat actor appears to be setting the stage for broader cloud worm attacks, researchers say.

If George Washington Had a TikTok, What Would His Password Be?

Artificial intelligence can be tricked into making password-based authentication even weaker.

(Sponsored Article) Why CFOs & CISOs Must Collaborate to Strengthen and Protect Organizations in a Recession

Cyber threats are intensifying even as budgets are being scrutinized. Now, more than ever, security and finance professionals need to align on cybersecurity strategies.

Zimbra Zero-Day Demands Urgent Manual Update

A bug in Zimbra email servers is already being exploited in the wild, Google TAG researchers warn.

WormGPT Cybercrime Tool Heralds an Era of AI Malware vs. AI Defenses

A black-hat alternative to GPT models specifically designed for malicious activities like BEC, malware, and phishing attacks is here, and will push organizations to level up with generative AI themselves.

Training's New Understanding

Risk reduction is the new gold standard for cybersecurity awareness training.

Electrical Grid Stability Relies on Balancing Digital Substation Security

Because digital substations are critical elements of electrical systems, they are a prime target for sophisticated cyberattacks.

Rogue Azure AD Guests Can Steal Data via Power Apps

A few default guest setting manipulations in Azure AD and over-promiscuous low-code app developer connections can upend data protections.

LATEST FROM DR TECHNOLOGY

Startup Spotlight: Binarly Hardens Firmware Security

The company, one of four finalists in this year's Black Hat USA Startup Spotlight competition, uses AI/ML to find firmware vulnerabilities.

LATEST FROM THE EDGE

How Do I Protect My API Keys From Appearing in Search Results?

A few lines of code can help you prevent accidental exposure, manage sensitive information, and maintain different configurations for various environments.

LATEST FROM DR GLOBAL

UAE and South African Hospitals Fail on DMARC Implementation

Only a quarter of hospitals have implemented the strongest level of DMARC, with a third running any version of the email validation protocol.

How to Use Threat Intelligence to Mitigate Third-Party Risk