Dark Reading Daily -- January 17, 2023

CircleCI, LastPass, Okta, and Slack: Cyberattackers Pivot to Target Core Enterprise Tools

High-profile software provider compromises in the past few months show that threat actors are actively targeting the services underpinning corporate infrastructure. Here's what to do about it.

Java, .NET Developers Prone to More Frequent Vulnerabilities

About three-quarters of Java and .NET applications have vulnerabilities from the OWASP Top 10 list, while only 55% of JavaScript codebases have such flaws, according to testing data.

Norton LifeLock Warns on Password Manager Account Compromises

Password manager accounts may have, ironically, been compromised via simple credential stuffing, thanks to password reuse.

Malware Comes Standard With This Android TV Box on Amazon

The bargain T95 Android TV device was delivered with preinstalled malware, adding to a trend of Droid devices coming out-of-the-box tainted.

Sneaky New Stealer Woos Corporate Workers Through Fake Zoom Downloads

Rhadamanthys spreads through Google Ads that redirect to bogus download sites for popular workforce software — as well as through more typical malicious emails.

Fast-Track Secure Development Using Lite Threat Modeling

Establish clear and consistent processes and standards to scale lite threat modeling's streamlined approach across your organization.

Securing the World's Energy Systems: Where Physical Security and Cybersecurity Must Meet

Energy has become the new battleground for both physical and cyber security warfare, driven by nation-state actors, increasing financial rewards for ransomware gangs and decentralized devices. Chris Price reports.

Organizations must be vigilant about balancing performance gains with security, governance, and compliance as they expand their use of Kubernetes.

Researchers Find 'Digital Crime Haven' While Investigating Magecart Activity

A security vendor's investigation of infrastructure associated with a new, crypto-focused Magecart skimmer leads to discovery of cryptoscam sites, malware distribution marketplace, Bitcoin mixers, and more.

$20K Buys Insider Access to Telegram Servers, Dark Web Ad Claims

In the ad, cybercriminals are offering to sell employee-level access to Telegram, researchers warn.

Better Phishing, Easy Malicious Implants: How AI Could Change Cyberattacks

Current defenses are able to protect against today's AI-enhanced cybersecurity threats, but that won't be the case for long as these attacks become more effective and sophisticated.

LATEST FROM THE EDGE

Why Mean Time to Repair Is Not Always A Useful Security Metric

Analyzing and learning from incidents is the ideal path to finding more insightful data and metrics, according to the VOID report.

LATEST FROM DR TECHNOLOGY

Software Supply Chain Security Needs a Bigger Picture

SBOMs aren't enough. OpenSSF's Alpha-Omega brings in new blood to help secure the open source projects most impactful to the software supply chain.

The Promise and Reality of Cloud Security