Dark Reading Daily -- April 26, 2023

'Good' AI Is the Only Path to True Zero-Trust Architecture

Ultimately, AI will protect the enterprise, but it's up to the cybersecurity community to protect "good" AI in order to get there, RSA's Rohit Ghai says.

CISOs Rethink Data Security With Info-Centric Framework

The Data Security Maturity Model ditches application, network, and device silos when it comes to architecting a data security strategy.

Attackers Abuse PaperCut RCE Flaws to Take Over Enterprise Print Servers

Customers should apply updates to the print management software used by more than 100 million organizations worldwide, with typical US customers found in the SLED sector.

DDoS, Not Ransomware, Is Top Business Concern for Edge Networks

A study found that ransomware threats are viewed as having the lowest overall perceived likelihood of attack on the edge.

'Educated Manticore' Targets Israeli Victims in Improved Phishing Attacks

The Iranian threat actor displays activity similar to that of other advanced persistent threat groups.

Building a Better SBOM

Generating an SBOM is easy. It's generating one that's comprehensive and accurate that's hard.

The Decline in Ransomware: Does It Actually Increase Risks for Organizations?

Organizations need to remain vigilant and not take the decline as reason to cut back their cybersecurity strategies.

(Sponsored Article) Open Source Vulnerabilities Still Pose a Big Challenge for Security Teams

Open source software continues to pose a challenge for companies. With the proper security practices, you can reduce your open source risk and manage it.

Tangled Up: 'Tomiris' APT Uses Turla Malware, Confusing Researchers

Researchers are unraveling the threads connecting two separate, but in some ways overlapping, Russian-language APTs.

Rethinking Safer AI: Can There Really Be a 'TruthGPT'?

Is Elon Musk's "maximum truth-seeking AI" achievable? Overcoming bias in artificial technologies is crucial for cybersecurity, but doing it could be a challenge.

Cybersecurity Survival: Hide From Adversarial AI

Consider adding some security-through-obscurity tactics to your organization's protection arsenal to boost protection. Mask your attack surface behind additional zero-trust layers to remove AI's predictive advantage.

Millions of Artifacts, Misconfigured Enterprise Software Registries Are Ripe for Pwning

Researchers find 250 million artifacts and 65,000 container images exposed in registries and repositories scattered across the Internet.

LATEST FROM THE EDGE

Where There's No Code, There's No SDLC

How can we build security back into software development in a low-code/no-code environment?

LATEST FROM DR TECHNOLOGY

HiddenLayer Nabs Most Innovative Startup Crown at RSAC

The judges appreciated the scale of the problem the startup set out to solve: protecting the integrity of AI systems.

Successfully Managing Identity in Modern Cloud and Hybrid Environments