Dark Reading Daily -- January 10, 2023

Attackers Are Already Exploiting ChatGPT to Write Malicious Code

The AI-based chatbot is allowing bad actors with absolutely no coding experience to develop malware.

Rackspace Ransomware Incident Highlights Risks of Relying on Mitigation Alone

Organizations often defer patching because of business disruption fears — but that didn't work out very well for Rackspace's Hosted Exchange service.

JsonWebToken Security Bug Opens Servers to RCE

The JsonWebToken package plays a big role in the authentication and authorization functionality for many applications.

'Copyright Infringement' Lure Used for Facebook Credential Harvesting

Business users receive a message from Facebook warning their accounts will be permanently suspended for using photos illegally if they don't appeal within 24 hours, leading victims to a credential-harvesting page instead.

Web 3.0 Shifts Attack Surface and Highlights Need for Continuous Security

A model of continuous authentication and identification is needed to keep consumers safe.

Serbia Slammed With DDoS Attacks

The Serbian government reports that it staved off five attacks aimed at crippling Serbian infrastructure.

PurpleUrchin Gang Embraces DevOps in Massive Cloud Malware Campaign

The Automated Libra group is deploying all components of its campaign in an automated manner via containers, stealing free trial resources for cryptomining, but the threat could get larger.

Don't Be Blindsided by Software Bills of Materials

It's imperative we collaborate and partner to improve software security. This may require developing tools and standards that can enrich SBOMs and provide deeper analysis.

Name That Edge Toon: The Upside Down

Come up with a clever caption, and our panel of experts will reward the winner with a $25 Amazon gift card.

In Memoriam: Remembering Those Who Passed

Security stands on the shoulders of giants. We take a moment to remember their contributions toward keeping people, data, and systems safe.

LATEST FROM THE EDGE

7 Use Cases for Distributed Cloud Environments

As infrastructure has grown more complex, the need to effectively manage it has grown, too – particularly for applications and APIs.

LATEST FROM DR TECHNOLOGY

Latest Firmware Flaws in Qualcomm Snapdragon Need Attention

The issue concerns the boot layer of ARM chips, which are driving a low-power mobile ecosystem that includes 5G smartphones and base stations.

The Promise and Reality of Cloud Security