Dark Reading Weekly -- January 04, 2024

As cybersecurity leaders confront ever more complex challenges, the new year offers security leaders a chance to strategically reevaluate and plan for 2024.

LATEST SECURITY NEWS & COMMENTARY

I Securely Resolve: CISOs, IT Security Leaders Share 2024 Resolutions

As cybersecurity leaders confront ever more complex challenges, the new year offers security leaders a chance to strategically reevaluate and plan for 2024.

'Operation Triangulation' Spyware Attackers Bypass iPhone Memory Protections

The Operation Triangulation attacks are abusing undocumented functions in Apple chips to circumvent hardware-based security measures.

Russian Agents Hack Webcams to Guide Missile Attacks on Kyiv

Incident prompts Ukraine's security service to ask webcam operators in country to stop live broadcasts.

Attackers Abuse Google OAuth Endpoint to Hijack User Sessions

Infostealers such as Lumma and Rhadamanthys have integrated the generation of persistent Google cookies through token manipulation.

Cybercriminals Flood Dark Web With X (Twitter) Gold Accounts

Verified accounts for celebs and organizations deliver a deep vein of cybercrime riches for crooks.

'Black Basta Buster' Exploits Ransomware Bug for File Recovery

A tool now allows for victim files encrypted by the Black Basta cybercriminal gang to be fully or partially recoverable, depending on their size.

10 Years After Yahoo Breach, What's Changed? (Not Much)

Yahoo customers suffered the largest data breaches in history by some measures. But a decade on, experts warn, we still haven't learned our lesson.

5 Steps for Preventing and Mitigating Corporate Espionage

Companies must take steps to enhance their protection against corporate espionage and safeguard their assets.

Startups Scramble to Build Immediate AI Security

AI may be inherently insecure, but only a handful of startups have put forward real visions to mitigate AI's threats and keep data private.

In Cybersecurity and Fashion, What's Old Is New Again

What a recent rise in DDoS attacks portends — and how to prepare for 2024.

MORE NEWS / MORE COMMENTARY


HOT TOPICS
Skynet Ahoy? What to Expect for Next-Gen AI Security Risks The innovation that ChatGPT and other LLMs demonstrate is a good thing, but safeguards and other security frameworks must keep pace. How Cybercriminals Will Sway 2024 US Elections, or Try To "Coordinated inauthentic behavior" networks are already attempting to build up audiences for their campaigns via fake news outlets, social media platforms, and other avenues. Cyber Employment 2024: Sky-High Expectations Fail Businesses & Job Seekers Unreasonable requirements, low salaries, and a lack of commitment to training leaves businesses unable to hire their perfect cybersecurity pros. So, is there really a workforce "shortage"? MORE