Dark Reading Daily -- September 11, 2023

Follow Dark Reading:

September 11, 2023

LATEST SECURITY NEWS & COMMENTARY

Critical Security Bug Opens Cisco BroadWorks to Complete Takeover

Cyberattackers could exploit CVE-2023-20238 to carry out a variety of nefarious deeds, from data theft and code execution to phishing, fraud, and DoS.

'Evil Telegram' Spyware Campaign Infects 60K+ Mobile Users

Legitimate-seeming Telegram "mods" available in the official Google Play store for the encrypted messaging app signal the rise of a new enterprise threat.

Kenya Initiates Public Sector Digital Skills Training, No Mention of Cybersecurity

Training will cover cloud skills and working in a paperless environment, but any mention of a cybersecurity element is conspicuously lacking.

Trickbot, Conti Sanctions Affect Top Cybercrime Brass

US Treasury officials said the sanctions move is part of its effort to combat Russian state-sponsored cybercrime.

3 Strategies to Defend Against Resurging Infostealers

Infostealer incidents have more than doubled recently, making it critical to bolster your defenses to mitigate this growing threat.

MORE NEWS / MORE COMMENTARY


HOT TOPICS
Microsoft IDs Security Gaps that Let Threat Actors Steal Signing Key China's Storm-0558 accessed user emails at some 25 enterprise organizations earlier this year using forged tokens. Does Generative AI Comply With Asimov's 3 Laws of Robotics? Putting the top 10 generative AI tools to the ethical test reveals more about humanity than artificial intelligence. How New SEC Rules Can Benefit Cybersecurity Teams Securities and Exchange Commission rules elevate cybersecurity to a critical strategic concern and compel businesses to prioritize cyber resilience. Name That Edge Toon: Prized Possessions Come up with a clever caption, and our panel of experts will reward the winner with a $25 Amazon gift card. As LotL Attacks Evolve, So Must Defenses Because living-off-the-land (LotL) attacks masquerade as frequently used, legitimate companies, they are very difficult to block and detect. MORE

EDITORS' CHOICE

Apple Hit By 2 No-Click Zero-Days in Blastpass Exploit Chain

Researchers at Citizen Lab recommend immediately updating any iPhones and iPads to the latest OSes.

LATEST FROM THE EDGE

3 Ways to Expand the Cyber Talent Pool From Splash Pad to Watering Hole

Why — and how — "unqualified" candidates will fill the reservoir with the security workers America is thirsty for.

LATEST FROM DR TECHNOLOGY

Microsoft, Google Take on Obsolete TLS Protocols

Google shortened the lifetime of Transport Layer Security (TLS) certificates, and Microsoft plans to downgrade support for older versions, giving companies more data security but also removing visibility into their own traffic.

LATEST FROM DR GLOBAL

Rwanda Launches Smart-City Investment Program

The ambitious move by the nation also comes with cybersecurity risks.

WEBINARS

Cyber Risk Assessment Secrets From the Pros
Executives want to know whether they should worry about an attack that hit another organization. They worry how safe they are from a breach. But it can be difficult for security teams to quantitatively measure risk, or even say with ...
The Threat Hunter's Playbook: Mastering Cloud Defense Strategies
Secure your spot now for this unforgettable cybersecurity adventure, filled with real-world examples, best practices, and expert insights from our threat research team. Level up your cloud security defense. When you attend this webinar, you will hear from the Sysdig's ...

View More Dark Reading Webinars >>

WHITE PAPERS

View More White Papers >>

FEATURED REPORTS

Everything You Need to Know About DNS Attacks
How Enterprises Are Managing Application Security Risks in a Heightened Threat Environment
Concerns over API security and low-code/no-code use added to an already-full plate of application security challenges for many organizations over the last year. IT and security decision-makers are deeply concerned about compromises resulting from vulnerabilities in the software supply ...
Successfully Managing Identity in Modern Cloud and Hybrid Environments
Cloud promised to simplify the security and management of enterprise systems. In many ways it has, but when it comes to identity management it's as complicated as ever. This report details how to get identity programs on track -- and ...

View More Dark Reading Reports >>

PRODUCTS & RELEASES

CybeReady Provides Cybersecurity Awareness Month Kits As CISOs Defend Against AI Driven Attacks

IBM Expands Cloud Security and Compliance Center

Tuya Smart and Amazon Web Services Collaborate to Establish an IoT Security Lab

IBM Addresses Data Incident for Janssen CarePath Database

MORE PRODUCTS & RELEASES

CURRENT ISSUE

What Ransomware Groups Look for in Enterprise Victims
DOWNLOAD THIS ISSUE
VIEW BACK ISSUES

Dark Reading Daily
-- Published By Dark Reading
Informa Tech Holdings LLC | Registered in the United States
with number 7418737 | 605 Third Ave., 22nd Floor, New York, New York 10158, USA

To opt-out of any future Dark Reading Daily Newsletter emails, please respond here.

Thoughts about this newsletter? Give us feedback.

Keep This Newsletter Out Of Your SPAM Folder
Don't let future editions go missing. Take a moment to add the newsletter's address to your anti-spam white list:

If you're not sure how to do that, ask your administrator or ISP. Or check your anti-spam utility's documentation.

We take your privacy very seriously. Please review our Privacy Statement.

What Ransomware Groups Look for in Enterprise Victims