Dark Reading Daily -- October 14, 2022

Feature-Rich 'Alchimist' Cyberattack Framework Targets Windows, Mac, Linux Environments

The comprehensive, multiplatform framework comes loaded with weapons, and it is likely another effort by a China-based threat group to develop an alternative to Cobalt Strike and Sliver.

Novel npm Timing Attack Allows Corporate Targeting

A timing attack helps cyberattackers lob malicious code-bombs at corporate targets by cloning private package names.

Cyberattackers Spoof Google Translate in Unique Phishing Tactic

The campaign uses a combination of tactics and a common JavaScript obfuscation technique to fool both end users and email security scanners to steal credentials.

QAKBOT Attacks Spike Amid Concerning Cybercriminal Collaborations

The QAKBOT group has successfully ramped up its operations, infecting systems, installing attack frameworks, and selling access to other groups, including Black Basta.

What the Uber Breach Verdict Means for CISOs in the US

Can already beleaguered CISOs now add possible legal charges to their smorgasbord of job considerations? Disclose a breach to comply and face dismissal, or cover it up and face personal punishment.

What You Need for a Strong Security Posture

From the basics to advanced techniques, here's what you should know.

Nudge Security Launches Platform With Humans in Mind

SaaS security platform promises to track down shadow IT, map supply chain risk, and "nudge" employees to work securely.

Android Leaks Wi-Fi Traffic Even When VPN Protection Features Are On

The platform lets network connectivity data escape outside of the secure tunnel when connected to a public network, posing a "privacy concern" for users with "certain threat models," researchers said.

6 Things Every CISO Should Do the First 90 Days on the Job

A CISO's responsibilities have evolved immensely in recent years, so their first three months on the job should look a different today than they might have several years ago.

It's Time to Make Security an Innovation Enabler

How data-driven security can best safeguard your unique cloud operations.

WhatsApp Users Beware: Dangerous Mobile Trojan Being Distributed via Malicious Mod

Among other things, users who download the app could end up having their WhatsApp account details stolen.

LATEST FROM THE EDGE

Comprehensive Network Visibility Is Imperative for Zero-Trust Maturity

Distrust and verify, because you can't protect what you can't see.

LATEST FROM DR TECHNOLOGY

Cybersecurity Will Account for Nearly One-Quarter of AI Software Market Through 2025

A boom in artificial intelligence-powered detection and remediation tools pushes security spending to the top of the AI market, according to Forrester.

How Machine Learning, AI & Deep Learning Improve Cybersecurity