Dark Reading Daily -- January 18, 2024

The first Chrome zero-day bug of 2024 adds to a growing list of actively exploited vulnerabilities found in Chromium and other browser technologies.

LATEST SECURITY NEWS & COMMENTARY

Google Chrome Zero-Day Bug Under Attack, Allows Code Injection

The first Chrome zero-day bug of 2024 adds to a growing list of actively exploited vulnerabilities found in Chromium and other browser technologies.

CISA: AWS, Microsoft 365 Accounts Under Active 'Androxgh0st' Attack

Cyberattackers are targeting Apache webservers and websites using the popular Laravel Web application framework in order to steal credentials for the apps.

$80M in Crypto Disappears Into Drainer-as-a-Service Malware Hell

"Infernal Drainer" campaign represents a dangerous evolution in crypto-drainers, credibly spoofing Coinbase and maintaining a vast infrastructure-for-rent biz.

Nearly 7K WordPress Sites Compromised by Balada Injector

Nearly 200K WordPress sites could be vulnerable to the attack thanks to CVE-2023-6000, lurking in the PopUp Builder plug-in.

Sophisticated macOS Infostealers Get Past Apple's Built-In Detection

Emerging malware variants can evade various static-signature detection engines, including XProtect, as attackers rapidly evolve to challenge defense systems.

Strength in Numbers: The Case for Whole-of-State Cybersecurity

WoS cybersecurity creates a united front for governments to defend against threat actors, harden security postures, and protect constituents who depend on services.

Experts Ponder Effectiveness of Official Warnings of Cyber Scams

Dubai Police and Ghana's Cyber Security Authority issue public warnings, but they're battling human nature and users' inattention.

'Punchmade Dev' Cybercrime Rapper Launches Cash-Scamming Web Shop

For a small sum, users can reportedly buy Cash App credentials already loaded with thousands of dollars.

MORE NEWS / MORE COMMENTARY


HOT TOPICS
Patch ASAP: Max-Critical Atlassian Bug Allows Unauthenticated RCE Rated at a CVSS score of 10, the bug is as bad as it gets, allowing remote cyberattackers unfettered access to corporate environments. 178K+ SonicWall Firewalls Vulnerable to DoS, RCE Attacks Two flaws discovered a year apart are ostensibly the same with slightly different exploit paths, exposing corporate networks to risk and potential intrusion. Anti-Ransomware Coalition Bound to Fail Without Key Adjustments International pledge to reject ransomware demands misses the most important way to combat cybercrime: prevention. Name That Toon: Cast Adrift Feeling creative? Submit your caption and our panel of experts will reward the winner with a $25 Amazon gift card. MORE

PRODUCTS & RELEASES

Intel 471 Appoints Technology Veteran, Sonja Tsiridis, Chief Technology Officer

Salt Security Delivers API Posture Governance Engine

ESET Launches New Managed Detection and Response (MDR) Service for Small and Midsize Businesses

Mimecast Announces New CEO

MORE PRODUCTS & RELEASES

EDITORS' CHOICE

Ivanti Zero-Day Exploits Skyrocket Worldwide; No Patches Yet

Anyone who hasn't mitigated two zero-day security bugs in Ivanti VPNs may already be compromised by a Chinese nation-state actor.

LATEST FROM THE EDGE

Lock Down the Software Supply Chain With 'Secure by Design'

As zero days and complex networks create gaps for cyberattacks, software developers and agencies such as CISA look to secure by design for building in defenses.

LATEST FROM DR TECHNOLOGY

InfoSec 101: Why Data Loss Prevention is Important to Enterprise Defense

Data is the most valuable asset for any organization, and protecting it is crucial to maintaining business continuity.

LATEST FROM DR GLOBAL

Q&A: How One Company Gauges Its Employees' Cybersecurity 'Fluency'

Cybersecurity compliance training is commonplace, but one Jordan-based company has taken an extra step in testing.

WEBINARS

View More Dark Reading Webinars >>

WHITE PAPERS

View More White Papers >>

FEATURED REPORTS

The State of Supply Chain Threats
How to Deploy Zero Trust for Remote Workforce Security
What Ransomware Groups Look for in Enterprise Victims
Ransomware attackers cast a wide net -- they just care about causing damage, making money, and gaining new victims. That means no organization is automatically immune to attack just because of its size or industry. Organizations need to take steps ...

View More Dark Reading Reports >>