Dark Reading Daily -- July 11, 2023

Amazon Prime Day Draws Out Cyber Scammers

Cybercriminals lining up to score off Amazon Prime Day shoppers, who spent more than $22B in US online sales alone last year, according to estimates.

'ScarletEel' Hackers Worm Into AWS Cloud

A toolset upgrade is making ScarletEel more slippery than ever while it continues to manipulate the cloud to perform cryptojacking, DDoS, and more.

Analysts: Cybersecurity Funding Set for Rebound

Analysts seem bullish about funding and M&A activity for the second half of the year, though transaction volumes and values dipped again in Q2.

Banking Firms Under Attack by Sophisticated 'Toitoin' Campaign

An attack involves a multistage infection chain with custom malware hosted on Amazon EC2 that ultimately steals critical system and browser data; so far, targets have been located in Latin America.

Zero Trust Keeps Digital Attacks From Entering the Real World

Amid IT/OT convergence, organizations must adopt an "assume breach" mindset to stop bad actors and limit their impact.

Deepfake Quantum AI Investment Scam Pops Up on Facebook

A consumer finance journalist and television personality took to Twitter to warn his followers about advertisements using his name and face to scam victims.

(Sponsored Article) Harness the Power of PKI to Battle Data Breaches

The average cost of a data breach is $4.35 million. Understand the power of public key infrastructure (PKI) and its role in encrypting data and battling breaches.

Spyware Gamed 1.5M Users of Google Play Store

Malware spoofed file management applications thanks to elevated permissions, enabling exfiltration of sensitive data with no user interaction, researchers find.

Can Generative AI Be Trusted to Fix Your Code?

Not yet — but it can help make incremental progress in reducing vulnerability backlogs.

MOVEit Transfer Faces Another Critical Data-Theft Bug

Users need to patch the latest SQL injection vulnerability as soon as possible. Meanwhile, Cl0p's data extortion rampage gallops on.

Meta's Rush to Topple Twitter Sets Up Looming Privacy Debate

GDPR is halting Meta's new Threads app from entering EU markets, portending a broader struggle over the right ways to collect user data on social apps.

LATEST FROM DR TECHNOLOGY

NIST Launches Generative AI Working Group

The public working group will develop guidance around the special risks of AI technologies that generate content.

LATEST FROM THE EDGE

10 Features an API Security Service Needs to Offer

Securing APIs is specialized work. Here's what organizations should look for when selecting an outside partner.

LATEST FROM DR GLOBAL

APT35 Develops Mac Bespoke Malware

Iran-linked APT35 group crafted specific Mac malware when targeting a member of the media with new tools to add backdoors.

How to Use Threat Intelligence to Mitigate Third-Party Risk