Dark Reading Daily -- November 18, 2023

EU Tightens Cybersecurity Requirements for Critical Infrastructure and Services

Organizations in "essential" sectors have until October 2024 to comply with the Network and Information Systems Directive 2022 (NIS2).

A Closer Look at State and Local Government Cybersecurity Priorities

Complexity impedes the universal and consistent application of security policies, which is an obstacle to adequately securing government environments.

Actions to Take to Defeat Initial Access Brokers

Initial access brokers (IAB) are often difficult to track. This Tech Tip spells out some countermeasures enterprises need to defend against stolen credentials.

IT Pros Worry Generative AI Will Be a Major Driver of Cybersecurity Threats

Organizations are concerned about generative AI technologies as being a major driver of cybersecurity threats in 2024.

HARmor Cleans, Sanitizes, Encrypts HAR Files

Okta's breach highlights the importance of sanitizing the data logged in HAR files before sharing them.

Cybersecurity Investment Involves More Than Just Technology

Organizations are also looking at threat intelligence, risk assessment, cyber insurance, and third-party risk management.

Make Changes to Be Ready for the New SEC Cybersecurity Disclosure Rule

Mandiant/Google Cloud's Jill C. Tyson and Dark Reading's Terry Sweeney on how companies can better plan and prepare for the Securities and Exchange Commission's new cybersecurity disclosure rule.

'CacheWarp' AMD VM Bug Opens the Door to Privilege Escalation

Academics in Germany figured out how to reverse time in AMD virtualization environments, then reap the spoils.

Rackspace Ransomware Costs Soar to Nearly $12M

Rackspace's 2022 ransomware attack costs only continue to mount, with lawsuits in the offing — and show the long-tail costs of a cyberattack.

Microsoft Zero-Days Allow Defender Bypass, Privilege Escalation

Another two bugs in this month's set of fixes for 63 CVEs were publicly disclosed previously but have not been exploited yet.

When Good Security Awareness Programs Go Wrong

Avoid making these mistakes when crafting a security awareness strategy at your organization.

Name That Edge Toon: Out for the Count

Come up with a clever cybersecurity-related caption, and our panel of experts will reward the winner with a $25 Amazon gift card.

First Wave of Vulnerability-Fixing AIs Available for Developers

GitHub joins a handful of startups and established firms in the market, but all the products are essentially "caveat developer" — let the developer beware.

Effective Security Analytics for Enterprises