Dark Reading Daily -- July 27, 2022

Discord, Telegram Services Hijacked to Launch Array of Cyberattacks

Attackers are easily turning popular messaging apps and their associated services — like bots, cloud infrastructure, and CDNs — against users, researchers warn.

LockBit 3.0: Significantly Improved Ransomware Helps the Gang Stay on Top

Just ahead of its headline-grabbing attack on the Italian tax agency, the infamous ransomware group debuted an improved version of the malware featuring parts from Egregor and BlackMatter.

Economic Downturn Raises Risk of Insiders Going Rogue

Insiders could become more vulnerable to cybercrime recruitment efforts, new report says.

Ducktail Spear-Phishing Campaign Uses LinkedIn to Hijack Facebook Business Accounts

Ducktail targets marketing and HR professionals through LinkedIn to hijack Facebook accounts and run malvertising schemes.

The Beautiful Lies of Machine Learning in Security

Machine learning should be considered an extension of — not a replacement for — existing security methods, systems, and teams.

How Risk-Based Vulnerability Management Has Made Security Easier

Trying to remediate everything was never a winning strategy. RBVM is an approach that gets organizations better results with less effort.

Microsoft Tops Brands Phishers Prefer

Wide use of Microsoft 365 applications by business lets phishers easily launch data theft, BEC, ransomware, and other attacks, new report finds.

(Sponsored Article) Flying Blind in Security Operations

Too many organizations are STILL getting breached. Every day across large and small organizations, intrusions and breaches happen.

Rare 'CosmicStrand' UEFI Rootkit Swings into Cybercrime Orbit

The firmware threat offers ultimate stealth and persistence — and may be distributed via tainted firmware components in a supply chain play, researchers theorize.

The Kronos Ransomware Attack: What You Need to Know So Your Business Isn't Next

Identify your business's security posture and head off ransomware attacks with third-party risk management and vendor security assessments.

What Firewalls Can — and Can't — Accomplish

Understanding the limitations of firewalls is important to protecting the organization from evolving threats.

Supercharged Version of Amadey Infostealer & Malware Dropper Bypasses AVs

Several threat actors used Amadey Bot previously to steal information and distribute malware such as the GandCrab ransomware and the FlawedAmmy RAT.

LATEST FROM THE EDGE

Equitable Digital Identity Verification Requires Moving Past Flawed Legacy Systems

Data science can be used to improve access to government assistance while reducing fraud.

LATEST FROM DR TECHNOLOGY

AI Can Help Fintechs Fight Fraud-as-a-Service

Artificial intelligence tools can help companies strike the right balance between preventing financial crime and maintaining customer service and satisfaction.

Implementing Zero Trust In Your Enterprise: How to Get Started