Dark Reading Daily -- June 08, 2023

Cl0p Claims the MOVEit Attack; Here's How the Gang Did It

A researcher guides Dark Reading through the most important bits of Cl0p's latest exploit.

Cl0p Cybercrime Gang Delivers Ultimatum After Payroll Breach

Experts and researchers warn individuals and organizations that the cybercrime group is not to be trusted in their demands.

FBI: Sextortionist Campaigns Use Deepfakes to Target Children, Adults

Threat actors are lifting public images and videos from the Internet, altering them, and posting them online in a new wave of sextortion campaigns.

Minecraft Malware Spreading Through Mods, Plug-ins

A worm virus called "fracturizer" has been embedded in modpacks from various sites, including CurseForge and CraftBukkit.

The Case for a Federal Cyber-Insurance Backstop

By stepping in to provide aid, the federal government could help protect companies, insurers, and the economy from the impact of a widespread, catastrophic cyberattack.

Cyber Essentialism & 'Doing Less With Less'

Cybersecurity benefits from a focus on the vital few chores rather than the trivial many. Find the "right things" to encourage strategic thinking, then move the culture needle to promote that policy.

Microsoft Fined $20M For Xbox Child Data Collection

The FTC has demanded additional data privacy protections for kids using Xbox gaming systems, extending COPPA protections.

(Sponsored Article) How AI Can Help Organizations Adapt and Recover From Cyberattacks

Incident response playbooks and frameworks are leaving defenders ill-equipped to recover from the increasing number of successful cyberattacks. Developments in AI offer a new way for stretched teams to manage security incidents and heal swiftly.

Google Drive Deficiency Allows Attackers to Exfiltrate Workspace Data Without a Trace

No activity logging in the free subscription for Google's Web-based productivity suite exposes enterprises to insider and other threats, researchers say.

Streamers Ditch Netflix for Dark Web After Password Sharing Ban

Disgruntled users are pursuing offers for "full Netflix access" at steeply discounted rates.

Filling the Gaps: How to Secure the Future of Hybrid Work

By enhancing remote management and adopting hardware-enforced security, productivity can continue without inviting extra cyber-risk.

Verizon DBIR: Social Engineering Breaches Double, Leading to Spiraling Ransomware Costs

Ransomware continues its runaway growth with median payments reaching $50,000 per incident.

LATEST FROM DR GLOBAL

'PostalFurious' SMS Attacks Target UAE Citizens for Data Theft

SMS campaigns targeting members of the public in the United Arab Emirates have been detected.

LATEST FROM THE EDGE

Name That Edge Toon: Spring Chickens

Come up with a clever caption, and our panel of experts will reward the winner with a $25 Amazon gift card.

LATEST FROM DR TECHNOLOGY

Defenders Buckle Up for a Future of Detecting Deepfakes

Today technology companies have high success rates against generative AI-created voices and videos, but future detection will be much more difficult.

Everything You Need to Know About DNS Attacks