Dark Reading Daily -- July 29, 2023

Companies Must Have Corporate Cybersecurity Experts, SEC Says

Enterprises must now describe their management's expertise in cybersecurity. But what exactly does that entail?

10 Free Purple Team Security Tools to Check Out

Check out this curated list of cool tools and platforms for both offensive security experts and defenders, all of which will be released or demoed at Black Hat USA 2023.

Why CISOs Should Get Involved With Cyber Insurance Negotiation

Everyone benefits — the CISO, the company, and the insurer — when CISOs are included in arranging cyber insurance.

Are AI-Engineered Threats FUD or Reality?

The rise of generative AI is creating new ways to both attack and defend assets. Which threats are solid and which are vapor?

Choose the Best Biometrics Authentication for Your Use Case

Voice, face, and vein recognition each have its pros and cons. Here's what CISOs need to know.

Kyndryl Expands Managed Security Services With More SOC Options

The "SOC as a platform" offers organizations with integrated security and IT operations management.

Cyclops Launches From Stealth With Generative AI-Based Search Tool

The contextual cybersecurity search platform helps security teams gather information about their organizations' environments and security posture.

Massive macOS Campaign Targets Crypto Wallets, Data

Threat actors are distributing new "Realst" infostealer via fake blockchain games, researchers warn.

China Propaganda Spreads via US News Sites, Freelancers, Times Square

A widespread disinformation campaign aimed at Americans wasn't that effective, but it was certainly creative, even slipping in influence articles to legitimate news outlets like AZCentral.com.

Ubuntu Linux Cloud Workloads Face Rampant Root Take Takeovers

Some 40% of Ubuntu Linux cloud workloads subject to GameOverlay security bugs in the OverlayFS module.

Meet the Finalists for the 2023 Pwnie Awards

Hosts Sophia d'Antoine and Ian Roos presented the list at Summercon in Brooklyn, New York, where they also handed out a surprise Lifetime Achievement Award.

Infosec Doesn't Know What AI Tools Orgs Are Using

Hint: Organizations are already using a range of AI tools, with ChatGPT and Jasper.ai leading the way.

10 Features an API Security Service Needs to Offer

Securing APIs is specialized work. Here's what organizations should look for when selecting an outside partner.

How to Use Threat Intelligence to Mitigate Third-Party Risk