Dark Reading Daily -- March 09, 2023

AI-Powered 'BlackMamba' Keylogging Attack Evades Modern EDR Security

Researchers warn that polymorphic malware created with ChatGPT and other LLMs will force a reinvention of security automation.

TSA Issues Urgent Directive to Make Aviation More Cyber Resilient

Will stricter cybersecurity requirements make flying safer? The TSA says yes, and sees it as a time-sensitive imperative.

Emotet Resurfaces Yet Again After 3-Month Hiatus

More than two years after a major takedown by law enforcement, the threat group is once again proving just how impervious it is against disruption attempts.

Russian Influence Duo Targets Politicians, CEOs for Embarrassing Video Calls

A state-backed threat actor impersonates political figures, tricking a prime minister, a former US president, and several European mayors and MPs into video calls later used in an anti-Ukraine influence campaign.

Rising Public Cloud Adoption Is Accelerating Shadow Data Risks

Using a risk-based approach to deal with policy violations and continuous compliance monitoring will help avoid data exposures and fines.

40% of Global ICS Systems Attacked With Malware in 2022

Led by growth in Russia, more than 40% of global ICS systems faced malicious activity in the second half of 2022.

Ransomware's Favorite Target: Critical Infrastructure and Its Industrial Control Systems

The health, manufacturing, and energy sectors are the most vulnerable to ransomware.

Key Proposals in Biden's Cybersecurity Strategy Face Congressional Challenges

The strategy document does nothing to change things on the ground in the near term; legislation, regulation, and follow-up executive action are all going to be key to moving forward the administration's agenda.

Scams Security Pros Almost Fell For

By working together as an industry, we can develop the technologies needed to account for human error.

Employees Are Feeding Sensitive Biz Data to ChatGPT, Raising Security Fears

More than 4% of employees have put sensitive corporate data into the large language model, raising concerns that its popularity may result in massive leaks of proprietary information.

LATEST FROM THE EDGE

'Skinny' Cyber-Insurance Policies Create Compliance Path

It's getting hard to buy cyber insurance, but not having it is not always an option. Low-coverage plans could bridge the gap.

LATEST FROM DR TECHNOLOGY

Tech Giants Go Cloud-Native Shopping

Cisco’s acquisition of cloud-native firewall provider Valtix and HPE’s deal to buy SSE provider Axis Security fill gaps in their existing portfolios.

The Promise and Reality of Cloud Security