Dark Reading Daily -- April 18, 2023

FIN7, Former Conti Gang Members Collaborate on 'Domino' Malware

Members of the former ransomware group are using a FIN7 backdoor to deliver malware —including Cobalt Strike — to victim systems.

Pen Testers Need to Hack AI, but Also Question Its Existence

Learning how to break the latest AI models is important, but security researchers should also question whether there are enough guardrails to prevent the technology's misuse.

Google Issues Emergency Chrome Update for Zero-Day Bug

Because the security vulnerability is under active exploit, Google isn't releasing full details of the flaw while users could remain vulnerable.

Aloha PoS Restaurant Software Downed by Ransomware Attack

Thousands of restaurants impacted by what Aloha PoS parent company NCR says was a ransomware attack on one of its data centers.

Top 5 Data Security RSAC 2023 Sessions to Attend

A little preconference reconnoitering of upcoming seminars, keynotes, and track sessions makes plotting your days easier. Here's one attendee's list.

Name That Toon: Lucky Charm

Feeling creative? Submit your caption and our panel of experts will reward the winner with a $25 Amazon gift card.

(Sponsored Article) Survey Findings Show Link Between Data Silos and Security Vulnerabilities

A recent survey showed a surprising correlation between those who operate their businesses with risk and compliance data in silos and those who experienced data breaches in the last 24 months.

Western Digital Hackers Demand 8-Figure Ransom Payment for Data

Western Digital has yet to comment on claims that the breach reported earlier this month led to data being stolen.

How to Define Tier-Zero Assets in Active Directory Security

There are plenty of AD objects and groups that should be considered tier zero in every environment, but some will vary among organizations.

New Mirai Variant Employs Uncommon Tactics to Distribute Malware

RapperBot's initial infection tactic is one example of the different methods attackers are using to distribute malware.

Russian SolarWinds Culprits Launch Fresh Barrage of Espionage Cyberattacks

The threat group behind the SolarWinds supply chain attacks is back with new tools for spying on officials in NATO countries and Africa.

LATEST FROM THE EDGE

How CISOs Can Craft Better Narratives for the Board

Communicating cyber-risk upward to C-suite and board takes simplification and better understanding of the audience.

LATEST FROM DR TECHNOLOGY

ZeroFox Acquires LookingGlass

The combined company will boost ZeroFox's attack surface management capabilities.

The 10 Most Impactful Types of Vulnerabilities for Enterprises Today