Dark Reading Daily -- May 01, 2023

Follow Dark Reading:

May 01, 2023

LATEST SECURITY NEWS & COMMENTARY

Google Bans Thousands of Play Store Developer Accounts to Block Malware

Last year Google banned 173,000 developer accounts and prevented 1.5 million apps from reaching the Play Store as it fought policy violations and malware.

'BellaCiao' Showcases How Iran's Threat Groups Are Modernizing Their Malware

The dropper is being used in a Charming Kitten APT campaign that has hit organizations in multiple countries.

Firmware Looms as the Next Frontier for Cybersecurity

Software bugs are ubiquitous, and we're familiar with hardware threats. But what about the gap in the middle? Two researchers at Black Hat Asia will attempt to focus our attention there.

SOSSA and CRA Spell Trouble for Open Source Software

The lack of understanding around open source poses a threat when legislation is considered. Governments can help by offering funding to help remediate vulnerabilities and supporting in open source's long-term development.

MORE NEWS / MORE COMMENTARY


HOT TOPICS
Combating Kubernetes — the Newest IAM Challenge IT leaders need to ensure Kubernetes clusters don't become a gateway for cybercriminals. CISO Survival Guide for Cyberattacks CISOs who have survived major cyber incidents recommend letting company ethos guide incident response. The White House National Cybersecurity Strategy Has a Fatal Flaw The government needs to shift focus and reconsider how it thinks about securing our nation's digital and physical assets. Effects of the Hive Ransomware Group Takedown Despite some success in limiting damage from Hive, there's no time to relax security vigilance. MORE

EDITORS' CHOICE

SANS Reveals Top 5 Most Dangerous Cyberattacks for 2023

SEO-aided attacks, developer targeting, and malicious use of AI top the list for 2023.

LATEST FROM THE EDGE

Cyber Certainty: Investing in Resilience During a Post-Correction Market

While difficult, these time periods are a return to the reality of where the market truly is or should be. And all the while, the innovation economy continues to boom.

LATEST FROM DR TECHNOLOGY

Software-Dependency Data Delivers Security to Developers

Google has opened up its software-dependency database, adding to the security data available to developers and toolmakers. Now developers need to use it.

WEBINARS

Next-Generation Supply Chain Security
Supply chain attacks are on the rise. Attackers are injecting malicious code into software and hardware components to create backdoors into the organization. As the Kaseya attack demonstrated, compromising a widely used product gives attackers privileged access into corporate networks. ...
Building the SOC of the Future: Next-Gen Security Operations
No matter the industry, the organization's size, or the number of security professionals on staff, organizations need to monitor their systems for potential threats and respond quickly in the event of a compromise. Many enterprises are building out or expanding ...

View More Dark Reading Webinars >>

WHITE PAPERS

View More White Papers >>

FEATURED REPORTS

Successfully Managing Identity in Modern Cloud and Hybrid Environments
Cloud promised to simplify the security and management of enterprise systems. In many ways it has, but when it comes to identity management it's as complicated as ever. This report details how to get identity programs on track -- and ...
The 10 Most Impactful Types of Vulnerabilities for Enterprises Today
The enterprise attack surface is constantly expanding. Enterprises have to think beyond zero day vulnerabilities. It's imperative security teams start looking at vulnerabilities in 5G, firmware, edge, and ICS/OT, among others. Managing system vulnerabilities is one of the old ...
10 Hot Talks From Black Hat USA 2022
Black Hat USA brings together cutting-edge research, new security tools, and sophisticated defensive techniques over the course of two days. There were some recurring themes across the sessions, and many of these topics are going to be important issues to ...

View More Dark Reading Reports >>

PRODUCTS & RELEASES

Tessian Fully Integrates With M365 To Provide Threat Protection and Insider Risk Protection

MajorKey Accelerates Pureplay Information Security Strategy With Acquisition of Legion Star

Uptycs Launches Cloud Security Early Warning System

Delinea Onsite RSA Conference Survey Reveals Cloud Security Remains Top Cybersecurity Concern in 2023

MORE PRODUCTS & RELEASES

CURRENT ISSUE

Successfully Managing Identity in Modern Cloud and Hybrid Environments
DOWNLOAD THIS ISSUE
VIEW BACK ISSUES

Dark Reading Daily
-- Published By Dark Reading
Informa Tech Holdings LLC | Registered in the United States
with number 7418737 | 605 Third Ave., 22nd Floor, New York, New York 10158, USA

To opt-out of any future Dark Reading Daily Newsletter emails, please respond here.

Thoughts about this newsletter? Give us feedback.

Keep This Newsletter Out Of Your SPAM Folder
Don't let future editions go missing. Take a moment to add the newsletter's address to your anti-spam white list:

If you're not sure how to do that, ask your administrator or ISP. Or check your anti-spam utility's documentation.

We take your privacy very seriously. Please review our Privacy Statement.

Successfully Managing Identity in Modern Cloud and Hybrid Environments