Dark Reading Daily -- November 13, 2023

'CitrixBleed' Linked to Ransomware Hit on China's State-Owned Bank

Meanwhile, CISA joins the call to patch CVE-2023-4966 immediately amid reports of mass-exploit activity; at least 5,000 orgs remain exposed.

Intel Faces 'Downfall' Bug Lawsuit, Seeking $10K per Plaintiff

A class action suit claims Intel knowingly sold billions of faulty chips for years. The outcome could help define where poor vulnerability remediation becomes outright negligence.

'Shields Ready' Critical Infrastructure Initiative Addresses Inevitable Cyberattacks

A cyberattack is coming, disasters are certain, and the US government wants critical infrastructure firms ready to handle any disruption. Welcome to Shields Ready.

ChatGPT: OpenAI Attributes Regular Outages to DDoS Attacks

ChatGPT and the associated APIs have been affected by regular outages, citing DDoS attacks as the reason — the Anonymous Sudan group claimed responsibility.

Leaky DICOM Medical Standard Exposes Millions of Patient Records

A 30-year-old, rarely updated protocol for medical devices has exposed reams of highly personal data, thanks to a lack of proper security throughout owner environments.

State of Maine Becomes Latest MOVEit Victim to Surface

The state said 1.3 million individuals have been affected by this breach, which includes Social Security numbers and taxpayer information.

Navigating Tech Risks in Modern M&A Waters

Executives must rise to the challenge and take immediate action to grasp the intricacies of data, technology, and infrastructure within M&A.

(Sponsored Article) CISO Skills in a Changing Security Market: Are You Prepared?

The CISO role has evolved from a strictly technical position to one that increasingly requires business acumen. Here are some things you need to know.

There's Only One Way to Solve the Cybersecurity Skills Gap

The cybersecurity skills gap is making businesses more vulnerable, but it won't be fixed by upskilling high-potential recruits alone.

Treasury Markets Disrupted by ICBC Ransomware Attack

The attack on the world's largest bank has far-reaching repercussions; US Treasury states that it is in contact with financial regulators as it monitors the breach.

How to Outsmart Malware Attacks That Can Fool Antivirus Protection

One of the main challenges for Android users is protecting themselves malicious applications that can damage devices or perform other harmful actions.

MOVEit Hackers Pivot to SysAid Zero-Day in Ransomware Attacks

The Cl0p ransomware group is actively exploiting a SysAid zero-day flaw after running rampant through enterprise systems using MOVEit file transfer bug.

LATEST FROM THE EDGE

Steps to Follow to Comply With the SEC Cybersecurity Disclosure Rule

Mandiant/Google Cloud's Jill C. Tyson offers up timelines, checklists, and other guidance around enterprisewide readiness to ensure compliance with the new rule.

LATEST FROM DR TECHNOLOGY

Software Complexity Bedevils Mainframe Security

The high-performance and resilient platforms satisfy critical roles, but software complexity and the graying of the specialist workforce are creating security challenges.

LATEST FROM DR GLOBAL

Microsoft: Iran's Cyberattacks on Israel Exaggerated & Fabricated

Despite claims to the contrary, Iranian cyberattackers have been less strategic and more opportunistic over the last month as the Israel-Hamas war continues.

Tips for a Streamlined Transition to Zero Trust