Dark Reading Daily -- July 06, 2023

Cl0p's MOVEit Campaign Represents a New Era in Cyberattacks

The ransomware group shows an evolution of its tactics with MOVEit zero-day — potentially ushering in a new normal when it comes to extortion supply chain cyberattacks, experts say.

Microsoft Teams Exploit Tool Auto-Delivers Malware

The "TeamsPhisher" cyberattack tool gives pen testers — and adversaries — a way to deliver malicious files directly to a Teams user from an external account, or tenant.

China's Mustang Panda Linked to SmugX Attacks on European Governments

Attackers use HTML smuggling to spread the PlugX RAT in the campaign, which has been ongoing since at least December.

3 Critical RCE Bugs Threaten Industrial Solar Panels, Endangering Grid Systems

Exposed and unpatched solar power monitoring systems have been exploited by both amateurs and professionals, including Mirai botnet hackers.

Microsoft Can Fix Ransomware Tomorrow

You can't encrypt a file you can't open — Microsoft could dramatically impact ransomware by slowing it down.

A Golden Age of AI … or Security Threats?

Now is the time to build safeguards into nascent AI technology.

Ransomware Halts Operations at Japan's Port of Nagoya

LockBit 3.0 claims responsibility for the cyberattack that shuttered the largest port in Japan, according to authorities.

(Sponsored Article) Why Your SEG Could Be Your Email Security Achilles' Heel

As business email compromise attacks continue to grow and become increasingly sophisticated, is your secure email gateway providing sufficient protection?

Researchers Develop Exploit Code for Critical Fortinet VPN Bug

Some 340,000 FortiGate SSL VPN appliances remain exposed to the threat more than three weeks after Fortinet released firmware updates to address the issue.

A CISO's Guide to Paying Down Software Supply Chain Security Debt

When you just keep filing it away to handle "someday," security debt typically rears its head when you are most vulnerable and can least afford to pay it.

Chip Giant TSMC Blames $70M LockBit Breach on IT Hardware Supplier

The group has given one of Apple's biggest semiconductor suppliers until Aug. 6 to pay $70 million or risk having its data and "points of entry" to its network publicly leaked.

SSH Servers Hit in 'Proxyjacking' Cyberattacks

Cybercriminals employ obfuscated script to stealthily hijack victim server bandwidth for use in legitimate proxy networks.

LATEST FROM DR TECHNOLOGY

Startup Spotlight: Gomboc.ai Balances Cloud Infrastructure Security

The startup, one of four finalists in Black Hat USA's 2023 startup competition, uses deterministic AI to optimize cloud security.

LATEST FROM THE EDGE

Mitigating Risk With Threat Intelligence

Dark Reading's latest publication looks at a missing, but necessary, ingredient to effective third-party risk management.

LATEST FROM DR GLOBAL

OPERA1ER Cybercrime Group's Leader Arrested by Interpol

The group's mastermind was nabbed in Côte d'Ivoire for stealing up to $30 million using malware, phishing campaigns, and BEC scams, as part of international law enforcement's Operation Nervone.

How to Use Threat Intelligence to Mitigate Third-Party Risk