Dark Reading Daily -- March 20, 2024

Credential-stealing emails are getting past artificial intelligence's "known good" email security controls by cloaking malicious payloads within seemingly benign emails. The tactic poses a significant threat to enterprise networks.

LATEST SECURITY NEWS & COMMENTARY

'Conversation Overflow' Cyberattacks Bypass AI Security to Target Execs

5 Ways CISOs Can Navigate Their New Business Role

CISOs can successfully make their business operations more secure and play a larger role in the organization's overall strategy, but there are pitfalls to avoid, Forrester analysts warn.

Fortra Releases Update on Critical Severity RCE Flaw

The flaw has a CVSS rating of 9.8, and the company recommends product upgrades to fix the issue.

'PhantomBlu' Cyberattackers Backdoor Microsoft Office Users via OLE

The cyber campaign uses social engineering and sophisticated evasion tactics, including a novel malware-delivery method, to compromise hundreds of Microsoft Office users.

The New CISO: Rethinking the Role

Rising cybersecurity demands are changing the role of the head security officer. CISOs need to make a list, check it at least twice, and document every step.

Name That Toon: Bridge the Gap

Feeling creative? Submit your caption and our panel of experts will reward the winner with a $25 Amazon gift card.

Airbus Calls Off Planned Acquisition of Atos Cybersecurity Group

The purchase would have given Airbus more capabilities to address rising cyber threats in the aviation and aerospace industry.

Cheating Hack Halts Apex Legends E-Sports Tourney

Electronic Arts is trying to track down the RCE exploit that allowed hackers to inject cheats into games during the recent Apex Legends Global Series.

MORE NEWS / MORE COMMENTARY


HOT TOPICS
Tracking Everything on the Dark Web Is Mission Critical On the Dark Web, stolen secrets are your enemy, and context is your friend. Fujitsu: Malware on Company Computers Exposed Customer Data It remains unclear how long the IT services giant's systems were infiltrated and just how the cyberattack unfolded. 'GhostRace' Speculative Execution Attack Impacts All CPU, OS Vendors Like Spectre, the new GhostRace exploit could give attackers a way to access sensitive information from system memory and take other malicious actions. 6 CISO Takeaways From the NSA's Zero-Trust Guidance All companies — not just federal agencies — should aim to adopt the "network and environment" pillar of the National Security Agency's zero-trust guidelines. MORE