Dark Reading Daily -- June 09, 2023

Cybercrooks Scrape OpenAI API Keys to Pirate GPT-4

With more than 50,000 publicly leaked OpenAI keys on GitHub alone, OpenAI developer accounts are the third-most exposed in the world.

Easily Exploitable Microsoft Visual Studio Bug Opens Developers to Takeover

The bug is very dangerous and impacts a big swath of the developer community, researchers warn.

Sophisticated 'Impulse Project' Crypto Scam Sprawls With 1,000 Affiliate Sites

Ready-to-defraud turnkey services from Russia's Impulse Team are offered on the cyber underground and have built a campaign that has operated undetected dating back to 2016.

Barracuda Warns All ESG Appliances Need Urgent Rip & Replace

Patching, wiping ESG devices not enough to deny threat actor access following compromise, Barracuda says.

60K+ Android Apps Have Delivered Adware Undetected for Months

A campaign targeting mainly US users disguised malware in fake security software, game cracks, cheats, free Netflix, and other "modded" apps.

City of Dallas Still Clawing Back Weeks After Cyber Incident

The Texas city's networks have returned to 90% functionality following the May 3 Royal ransomware attack.

Fighting AI-Powered Fraud: Let the Battle of the Machines Begin

As cybercriminals tap the power of machine learning and generative AI to outwit fraud-detection systems, online fraud-prevention technologies must evolve accordingly.

The Growing Cyber Threats of Generative AI: Who's Accountable?

In the wrong hands, malicious actors can use chatbots to unleash sophisticated cyberattacks that could have devastating consequences.

US Aerospace Contractor Hacked With 'PowerDrop' Backdoor

Hackers used a little to do a lot, cracking a high-value target with hardly more than the living-off-the-land tools (PowerShell especially) found on any standard Windows computer.

Cyber Essentialism & 'Doing Less With Less'

Cybersecurity benefits from a focus on the vital few chores rather than the trivial many. Find the "right things" to encourage strategic thinking, then move the culture needle to promote that policy.

Top macOS Malware Threats: Here Are 6 to Watch

Apple's growing market share — in a shrinking PC market — and the growing use of Golang for malware development is pushing a gradual increase in malicious tools targeting macOS environments.

Cl0p Claims the MOVEit Attack; Here's How the Gang Did It

A researcher guides Dark Reading through the most important bits of Cl0p's latest exploit.

LATEST FROM DR GLOBAL

Cybersecurity Institute to Open in Saudi Arabia

The Global Cybersecurity Forum branch, which will be in Riyadh, is meant to enable the exchange of ideas and facilitate international projects and partnerships.

LATEST FROM THE EDGE

How Do I Reduce Security Tool Sprawl in My Environment?

When it comes to tool consolidation, focus on platforms over products.

LATEST FROM DR TECHNOLOGY

2 Lenses for Examining the Safety of Open Source Software

Improving the security of open source repositories while keeping malicious components out requires a combination of technology and people.

Concerns Mount Over Ransomware, Zero-Day Bugs, and AI-Enabled Malware