Dark Reading Daily -- August 02, 2023

Apple Users Open to Remote Control via Tricky macOS Malware

The Hidden Virtual Network Computing (hVNC) malware infests Macs and silently executes complete takeovers, with no user permission needed. It also sports persistence through reboots.

'DarkBERT' GPT-Based Malware Trains Up on the Entire Dark Web

The DarkBART and DarkBERT cybercriminal chatbots, based on Google Bard, represent a major leap ahead for adversarial AI, including Google Lens integration for images and instant access to the whole of the cyber-underground knowledge base.

CISA: 'Submarine' Backdoor Torpedoes Barracuda Email Security

A China-nexus cyber-espionage campaign rages on with the fourth backdoor to surface in the wild that takes advantage of the CVE-2023-2868 zero-day security bug — with severe threat of lateral movement, CISA warns.

White House Cyber Workforce Strategy: No Quick Fix for Skills Shortage

A lot of what the strategy proposes is well-intentioned but somewhat aspirational at the moment, industry experts say.

Space Pirates Turn Cyber Sabers on Russian, Serbian Organizations

The attackers have expanded beyond backdoors and recently started using Deed RAT to step up their attacks.

Canon Inkjet Printers at Risk for Third-Party Compromise via Wi-Fi

Nearly 200 models are affected by vulnerability that may give wireless access to unauthorized third parties.

Why the California Delete Act Matters

Bill 362 is a perfect template for a nationwide win against data brokers and the privacy infringements they cause.

Lessons Not Learned From Software Supply Chain Attacks

Businesses that develop business-, mission-, or safety-critical software must learn from previous victims of software supply chain attacks.

Summer Documentary Watch Party: 8 Sizzling Cybersecurity Tales

From the upcoming Billion Dollar Heist to docs on the Ashley Madison breach and Stuxnet, here are a bevy of films that can scratch that wanna-be hacker itch.

Best Practices for Enterprise Private 5G Security

Omdia's latest research with Trend Micro and CTOne sheds light on 5G security challenges and ways to effectively extend enterprise-grade security to 5G networks

CherryBlos Malware Uses OCR to Pluck Android Users' Cryptocurrency

The malware, along with a sister strain dubbed "FakeTrade," was found lurking in Google Play.

China's Volt Typhoon APT Burrows Deeper Into US Critical Infrastructure

US officials are concerned that the Beijing-directed cyberattacks could be a precursor to military disruption and broader destructive attacks on citizens and businesses.

LATEST FROM THE EDGE

Companies Must Have Corporate Cybersecurity Experts, SEC Says

Enterprises must now describe their management's expertise in cybersecurity. But what exactly does that entail?

LATEST FROM DR TECHNOLOGY

BloodHound Rewrites Open Source Tool, Launches Community Edition

The open source ecosystem for offensive and defensive security technologies is flourishing, giving security teams access to a wide range of tools to do their jobs.

LATEST FROM DR GLOBAL

Saudi Arabia's Tuwaiq Academy Opens Cybersecurity Bootcamp

Registration has opened for the cybersecurity specialty track at Tuwaiq Academy, where students will learn a variety of related skills.

How to Use Threat Intelligence to Mitigate Third-Party Risk