Dark Reading Daily -- July 13, 2023

Chinese APT Cracks Microsoft Outlook Emails at 25 Government Agencies

Foreign state-sponsored actors likely had access to privileged state emails for weeks, thanks to a token validation vulnerability.

Hackers Target Chinese Gamers With Microsoft-Signed Rootkit

Kernel mode driver can download second-stage payload directly to memory, allowing threat actors to evade endpoint detection and response tools.

White House Urged to Quickly Nominate National Cyber Director

A group of cybersecurity organizations is urging the White House to move with haste in nominating a new National Cyber Director, amid a complex and shifting threat landscape.

Hackers Exploit Policy Loophole in Windows Kernel Drivers

Using open source tools, attackers target Chinese speakers with malicious drivers with expired certificates, potentially allowing for full system takeover.

Ransomware, From a Different Perspective

A good backup strategy can be effective at mitigating a ransomware attack, but how many organizations consider that their backup data can also be targeted?

How to Put Generative AI to Work in Your Security Operations Center

Generative AI is the cybersecurity resource that never sleeps. Here are some of the ways security-focused generative AI can benefit different members of the SOC team.

QuickBlox API Vulnerabilities Open Video, Chat Users to Data Theft

QuickBlox users should update to the latest version of the platform in order to protect against several avenues of exploitation.

(Sponsored Article) Why Hybrid Work Has Made Secure Access So Complicated

Employees now have the freedom to work wherever they want, which brings new challenges for security teams trying to protect data.

Apple's Rapid Zero-Day Patch Causes Safari Issues, Users Say

Apple's emergency fix for a code-execution bug being actively exploited in the wild is reportedly buggy itself, and some indications point to the Cupertino giant halting patch rollouts.

Top Takeaways From Table Talks With Fortune 100 CISOs

As organizations struggle to keep up with new regulations and hiring challenges, chief information security officers share common challenges and experiences.

Mastodon Patches 4 Bugs, but Is the Twitter Killer Safe to Use?

Platform's independent server "instances" may have different security levels, creating potential for supply chain-like vulnerabilities.

Microsoft Discloses 5 Zero-Days in Voluminous July Security Update

Fixes for more than 100 vulnerabilities affect numerous products, including Windows, Office, .Net, and Azure Active Directory, among others.

LATEST FROM DR TECHNOLOGY

Startup Spotlight: Mobb Aims to Be the Fixer

The company, one of four finalists in this year's Black Hat USA Startup Spotlight competition, automates vulnerability remediation using AI.

LATEST FROM THE EDGE

10 Features an API Security Service Needs to Offer

Securing APIs is specialized work. Here's what organizations should look for when selecting an outside partner.

LATEST FROM DR GLOBAL

APT35 Develops Mac Bespoke Malware

Iran-linked APT35 group crafted specific Mac malware when targeting a member of the media with new tools to add backdoors.

How to Use Threat Intelligence to Mitigate Third-Party Risk