Dark Reading Daily -- March 15, 2024

CVE-2024-48788, like many other recent Fortinet flaws, will likely be an attractive target, especially for nation-state backed actors.

LATEST SECURITY NEWS & COMMENTARY

Fortinet Warns of Yet Another Critical RCE Flaw

CVE-2024-48788, like many other recent Fortinet flaws, will likely be an attractive target, especially for nation-state backed actors.

Alabama Under DDoS Cyberattack by Russian-Backed Hacktivists

The hacktivist group Anonymous Sudan claims credit for a cyberattack that disrupted Alabama state government earlier this week.

Windows SmartScreen Bypass Flaw Exploited to Drop DarkGate RAT

Attackers use Google redirects in their phishing attack leveraging a now-patched vulnerability that spreads the multifaceted malware.

TikTok Ban Raises Data Security, Control Questions

Approved by the House and moving on to the Senate, the potential ban points up the porousness of governmental control in the digital age.

FCC Approves Voluntary Cyber Trust Labels for Consumer IoT Products

Here's what IoT device manufacturers need to know to earn a cybersecurity stamp of approval from the government.

How to Identify a Cyber Adversary: What to Look For

There are many factors involved in attributing a cyber incident to a specific threat actor.

(Sponsored Article) Defending Against Cyber Threats in the Age of AI

Changing threat landscapes and artificial intelligence's evolving role in cyber defense have important lessons for defending against attacks.

MORE NEWS / MORE COMMENTARY


HOT TOPICS
ChatGPT Spills Secrets in Novel PoC Attack Research is latest in a growing body of work to highlight troubling weaknesses in widely used generative AI tools. Nissan Oceania Breached; 100K People Affected Down Under A possible ransomware attack has exposed government and personal data of Australians and New Zealanders, encompassing the carmaker's customers, dealers, and employees. How to Identify a Cyber Adversary: Standards of Proof Identifying the who, what, and how behind a cyberattack is crucial for preventing future strikes. Why You Need to Know Your AI's Ancestry Securing AI can't wait an hour, let alone a decade. MORE

PRODUCTS & RELEASES

Expel Releases Updated Toolkit in Response to NIST 2.0

Nozomi Networks Secures $100M Investment to Defend Critical Infrastructure

Red Canary Announces Full Coverage of All Major Cloud Providers

MORE PRODUCTS & RELEASES

EDITORS' CHOICE

Patch Now: Kubernetes RCE Flaw Allows Full Takeover of Windows Nodes

Attackers can remotely execute code with system privileges by exploiting a vulnerability in the source code of the open source container management system.

LATEST FROM THE EDGE

Creating Security Through Randomness

How lava lamps, pendulums, and suspended rainbows keep the Internet safe.

LATEST FROM DR TECHNOLOGY

Google's Post-Quantum Upgrade Doesn't Mean We're All Protected Yet

Just because Google has put in the work to quantum-proof Chrome doesn't mean post-quantum security is all set.

LATEST FROM DR GLOBAL

Malawi Passport System Back Online After Debilitating Cyberattack

Passport printing and distribution will resume first in Lilongwe as the immigration system gets back on its feet.

WEBINARS

View More Dark Reading Webinars >>

WHITE PAPERS

View More White Papers >>

FEATURED REPORTS

View More Dark Reading Reports >>