Dark Reading Daily -- June 29, 2023

6 Ways Cybersecurity Is Gut-Checking the ChatGPT Frenzy

Generative AI chatbots like ChatGPT are the buzziest of the buzzy right now, but the cyber community is starting to mature when it comes to assessing where it should fit into our lives.

Russian Spies, War Ministers Reliant on Cybercrime in Pariah State

Swiss intelligence warns that Russia ramping up cyberattacks on infrastructure and cyber espionage as on-the-ground options evaporate.

Generative AI Projects Pose Major Cybersecurity Risk to Enterprises

Developers' enthusiasm for ChatGPT and other LLM tools leaves most organizations largely unprepared to defend against the vulnerabilities that the nascent technology creates.

Npm Plagued With 'Manifest Confusion' Malware-Hiding Weakness

The popular package manager for software developers has been vulnerable to this attack vector for a while, and negligent in fixing the problem, according to a former employee.

3 Strategies for Bringing Rigor to Software Security

With the National Cybersecurity Strategy planning to add real teeth into enforcement actions, software vendors have extra incentive to reduce applications' security debt.

LetMeSpy Phone-Tracking App Hacked, Revealing User Data

With at least 13,000 compromised devices in the data leak, it is still unknown who the threat actor is or whether or not victims will be personally notified.

Pilot Applicant Information for American, Southwest Hacked

The attack exposed personal information from pilot applicants, prompting both airlines to ditch their third-party provider and move services internally.

Why the FDA's SBOM Mandate Changes the Game for OSS Security

The new FDA software bill of materials (SBOM) guidelines for medical devices could have broad impact on the healthcare industry and the broader open source ecosystem.

Preventing Cyberattacks on Schools Starts With K–12 Cybersecurity Education

By investing in a strong future cybersecurity workforce, we can prevent future attacks on US critical infrastructure before they occur.

Most Enterprise SIEMs Blind to MITRE ATT&CK Tactics

Organizations are largely deluded about their own security postures, according to an analysis, with the average SIEM failing to detect a whopping 76% of attacker TTPs.

LATEST FROM DR TECHNOLOGY

Social Engineering Adds Depth to Red Team Exercises

Because social engineering usually succeeds, companies need to test whether their defenses can block adversaries that gain employees' trust.

LATEST FROM THE EDGE

The Infrastructure Security Engineer Is a Unicorn Among Thoroughbreds

This new role of safeguarding cloud deployments requires an exceedingly rare set of technical and soft skills.

LATEST FROM DR GLOBAL

Saudi Arabia's Cyber Capabilities Ranked Second Globally

Saudi Arabia is one of the world's leaders in cybersecurity development and preparedness, according to the latest rankings.

How to Use Threat Intelligence to Mitigate Third-Party Risk