Dark Reading Daily -- April 21, 2022

6 Malware Tools Designed to Disrupt Industrial Control Systems (ICS)

Stuxnet was the first known malware built to attack operational technology environment. Since then, there have been several others.

Okta Wraps Up Lapsus$ Investigation, Pledges More Third-Party Controls

Companies must enforce more security on their own third-party providers and retain the ability to conduct independent investigations, experts say.

Denonia Malware Shows Evolving Cloud Threats

Cloud security is constantly evolving and consistently different than defending on-premises assets. Denonia, a recently discovered serverless cryptominer drives home the point.

How Russia Is Isolating Its Own Cybercriminals

Sanctions imposed by the Biden administration, coupled with Russia's proposed initiative to cut itself off from the global Internet, is causing cybercriminals to ponder their future.

From Passive Recovery to Active Readiness

This is the shift that companies need to make after a cyberattack.

LinkedIn Brand Now the Most Abused in Phishing Attempts

New research shows threat actors increasingly leveraging social networks for attacks, with LinkedIn being used in 52% of global phishing attacks.

CISA, Australia, Canada, New Zealand, & UK Issue Joint Advisory on Russian Cyber Threats

The Russian government is ratcheting up malicious cyberattacks against critical infrastructure in countries supporting Ukraine.

More Than Half of Initial Infections in Cyberattacks Come Via Exploits, Supply Chain Compromises

Mandiant data also shows a dramatic drop in attacker dwell time on victim networks in the Asia-Pacific region — to 21 days in 2021 from 76 days in 2020.

Identifying a Vulnerability in the SAP Software Supply Chain

Make sure you're using the patch to block this supply chain attack.

The Misconceptions of 2021's Black Swan Cyber Events

Organizations can defend themselves from future unknows attacks by implementing targeted security hardening measures, turning on built-in security protections, and leveraging existing technology stack to achieve microsegmentation and credential hygiene.

EDITORS' CHOICE

Millions of Lenovo Laptops Contain Firmware-Level Vulnerabilities

Three flaws present in consumer laptops can give attackers a way to drop highly persistent malware capable of evading methods to remove it, security vendor says.

LATEST FROM THE EDGE

Backward-Compatible Post-Quantum Communications Is a Matter of National Security

When a quantum computer can decipher the asymmetric encryption protecting our vital systems, Q-Day will arrive.

LATEST FROM DR TECHNOLOGY

Anti-Fraud Partnership Brings Confidential Computing to Financial Services

Intel, FiVerity, and Fortanix team up to launch an AI-driven fraud detection platform into a confidential computing environment.

Understanding DNS Threats and How to Use DNS to Expand Your Cybersecurity Arsenal