Dark Reading Daily -- January 11, 2023

98 Patches: Microsoft Greets New Year With Zero-Day Security Fixes

Microsoft's January 2023 Patch Tuesday security update contains fixes for bugs in multiple products. Here's what you need to patch now.

Microsoft: Kinsing Targets Kubernetes via Containers, PostgreSQL

The cryptomining malware, which typically targets Linux, is exploiting weaknesses in an open source container tool for initial access to cloud environments.

Quantum Decryption Breakthrough? Not So Fast

A paper by two dozen Chinese researchers maintains that near-future quantum computers could crack RSA-2048 encryption, but experts call the claims misleading.

Black Hat Flashback: The Deadly Consequences of Weak Medical Device Security

Hacking to kill: Dark Reading's Fahmida Y. Rashid reflects on the monumental Black Hat 2011 moment when Jay Radcliffe showed how to hack his insulin pump.

Preparing for the Effects of Quantum-Centric Supercomputing

While it has been a perennial forecast that efficient universal quantum computers are “a decade away,” that prospect now seems a legitimate possibility. Organizations need to get ready now.

SCOTUS OKs WhatsApp Suit Against NSO Group

Supreme Court rules WhatsApp can sue NSO Group for damages caused by unauthorized Pegasus spyware installations.

San Fran's BART Investigates Vice Society Data Breach Claims

Vice Society is boasting that it compromised the San Francisco transportation system, while BART maintains operations and mounts an investigation.

In Memoriam: Remembering Those Who Passed

Security stands on the shoulders of giants. We take a moment to remember their contributions toward keeping people, data, and systems safe.

Web 3.0 Shifts Attack Surface and Highlights Need for Continuous Security

A model of continuous authentication and identification is needed to keep consumers safe.

Rackspace Ransomware Incident Highlights Risks of Relying on Mitigation Alone

Organizations often defer patching because of business disruption fears — but that didn't work out very well for Rackspace's Hosted Exchange service.

Attackers Are Already Exploiting ChatGPT to Write Malicious Code

The AI-based chatbot is allowing bad actors with absolutely no coding experience to develop malware.

LATEST FROM THE EDGE

Security Planning: Ask What Could Go Wrong

Are you asking the right questions about potential scenarios when thinking about disaster recovery and business continuity?

LATEST FROM DR TECHNOLOGY

Intel's New Xeon Chip Pushes Confidential Computing to the Cloud

After a delay of more than a year, Intel's on-chip confidential computing feature is coming to all the major cloud providers, starting with Microsoft's Azure.

The Promise and Reality of Cloud Security