Dark Reading Daily -- June 12, 2023

Brand-New Security Bugs Affect All MOVEit Transfer Versions

Progress has issued a second patch for additional SQL flaws that are distinct from the zero-day that the Cl0p ransomware gang is exploiting.

Cl0P Gang Sat on Exploit for MOVEit Flaw for Nearly 2 Years

Over that time, the group carried multiple tests to see if the exploit worked and to identify potential victims. It was like "turning the doorknob" to check for access, a researcher says.

DOS Attacks Dominate, but System Intrusions Cause Most Pain

In the latest Verizon "Data Breach Investigations Report," denial-of-service attacks are the most common type of security incident, but when it comes to breaches, nearly four-in-ten attackers compromise systems.

'Asylum Ambuscade' Cyberattackers Blend Financial Heists & Cyber Espionage

In a rare mix of motivations, the cyberattack group has been linked to both financial cybercrime and political spying efforts on governments.

5 Tips for Modernizing Your Security Operations Center Strategy

A solid, dependable SOC strategy that is scalable in the face of various security threats is essential to reduce cybersecurity risks to your business.

(Sponsored Article) What Apple's RSRs Reveal About Mac Patch Management

Apple's Rapid Security Response updates are designed to patch critical security vulnerabilities, but how much good can they do when patching is a weeks-long process?

Easily Exploitable Microsoft Visual Studio Bug Opens Developers to Takeover

The bug is very dangerous and impacts a big swath of the developer community, researchers warn.

60K+ Android Apps Have Delivered Adware Undetected for Months

A campaign targeting mainly US users disguised malware in fake security software, game cracks, cheats, free Netflix, and other "modded" apps.

After 'Inception' Attack, New Due Diligence Requirements Are Needed

To stem supply chain attacks, forging a new dynamic of shared cybersecurity hygiene accountability is the right thing to do.

The Growing Cyber Threats of Generative AI: Who's Accountable?

In the wrong hands, malicious actors can use chatbots to unleash sophisticated cyberattacks that could have devastating consequences.

Cybercrooks Scrape OpenAI API Keys to Pirate GPT-4

With more than 50,000 publicly leaked OpenAI keys on GitHub alone, OpenAI developer accounts are the third-most exposed in the world.

LATEST FROM DR GLOBAL

South African Female Students Offered Cyber Scholarship

Women of color are being offered a scholarship opportunity in South Africa — the offer will cover costs for pursuing a cyber career and encourage greater diversity of those studying cybersecurity courses.

LATEST FROM THE EDGE

3 Elite Communication Skills to Help Security Pros Get Projects Funded

It's not enough to know how to better protect the enterprise — you have to be able to convince decision-makers that your plans are necessary.

LATEST FROM DR TECHNOLOGY

Passkeys See Fresh Momentum With New Pilot Programs

Apple adds API that will enable sharing of passkeys across platforms, and Google offers passkey authentication in beta for Google Workspace and Google Cloud.

Concerns Mount Over Ransomware, Zero-Day Bugs, and AI-Enabled Malware