Dark Reading Weekly -- April 27, 2023

CISOs Rethink Data Security With Info-Centric Framework

The Data Security Maturity Model ditches application, network, and device silos when it comes to architecting a data security strategy.

Malware-Free Cyberattacks Are on the Rise; Here's How to Detect Them

Last year, 71% of enterprise breaches were pulled off quietly, with legitimate tools, research shows.

'Good' AI Is the Only Path to True Zero-Trust Architecture

Ultimately, AI will protect the enterprise, but it's up to the cybersecurity community to protect "good" AI in order to get there, RSA's Rohit Ghai says.

Millions of Artifacts, Misconfigured Enterprise Software Registries Are Ripe for Pwning

Researchers find 250 million artifacts and 65,000 container images exposed in registries and repositories scattered across the Internet.

Rethinking Safer AI: Can There Really Be a 'TruthGPT'?

Is Elon Musk's "maximum truth-seeking AI" achievable? Overcoming bias in artificial technologies is crucial for cybersecurity, but doing it could be a challenge.

North Korea's Kimsuky APT Keeps Growing, Despite Public Outing

Kim Jong Un's Swiss Army knife APT continues to spread its tendrils around the world, showing it's not intimidated by the researchers closing in.

3CX Supply Chain Attack Tied to Financial Trading App Breach

Mandiant found that North Korea's UNC4736 gained initial access on 3CX's network when an employee downloaded a weaponized but legitimately-signed app from Trading Technologies.

Expert Insight: Dangers of Using Large Language Models Before They Are Baked

Today's LLMs pose too many trust and security risks.

Effects of the Hive Ransomware Group Takedown

Despite some success in limiting damage from Hive, there's no time to relax security vigilance.

Building a Better SBOM

Generating an SBOM is easy. It's generating one that's comprehensive and accurate that's hard.

Cybersecurity Survival: Hide From Adversarial AI

Consider adding some security-through-obscurity tactics to your organization's protection arsenal to boost protection. Mask your attack surface behind additional zero-trust layers to remove AI's predictive advantage.

GPT-4 Provides Improved Answers While Posing New Questions

As is typical with emerging technologies, both innovators and regulators struggle with developments in generative AI, much less the rules that should govern its use.

Successfully Managing Identity in Modern Cloud and Hybrid Environments