Dark Reading Daily -- July 19, 2023

Google Cloud Build Flaw Enables Privilege Escalation, Code Tampering

Google's fix to the Bad.Build flaw only partially addresses the issue, say security researchers who discovered it.

FIN8 Modifies 'Sardonic' Backdoor to Deliver BlackCat Ransomware

The cybercrime group has given its backdoor malware a facelift in an attempt to evade detection, making some bug fixes and setting itself up to deliver its latest crimeware toy, BlackCat.

Attackers Pummel Millions of Websites via Critical WooCommerce Payments Flaw

A barrage of targeted attacks against vulnerable installations peaked at 1.3 million against 157,000 sites over the weekend, aimed at unauthenticated code execution.

Sogu, SnowyDrive Malware Spreads, USB-Based Cyberattacks Surge

Two separate threat actors are using poisoned USB drives to distribute malware in cyber-espionage campaigns targeting organizations across different sectors and geographies.

Pernicious Rootkits Pose Growing Blight On Threat Landscape

Attackers show renewed relentlessness in exploiting OS vulnerabilities that also circumvent defense and detection measures.

VirusTotal Data Leak Affects 5K+ Users

Some of the users who were impacted include the US Department of Justice, the NSA, and the FBI, alongside German intelligence agencies.

Hacker Infected & Foiled by Own Infostealer

A prolific threat actor has been operating on Russian-language forums since 2020, but then he accidentally infected his own computer and sold off its contents to threat researchers.

Linux Ransomware Poses Significant Threat to Critical Infrastructure

Organizations running Linux distributions need to prepare to defend their systems against ransomware attacks. Steps to ensure resiliency and basics such as access control reduce major disruptions.

Name That Toon: Shark Sighting

Feeling creative? Submit your caption and our panel of experts will reward the winner with a $25 Amazon gift card.

AWS Cloud Credential Stealing Campaign Spreads to Azure, Google Cloud

The TeamTNT threat actor appears to be setting the stage for broader cloud worm attacks, researchers say.

If George Washington Had a TikTok, What Would His Password Be?

Artificial intelligence can be tricked into making password-based authentication even weaker.

Microsoft 'Logging Tax' Hinders Incident Response, Experts Warn

A recent email compromise by Chinese APT group Storm-0558 highlights a lack of access to security logging by many Microsoft 365 license holders, prompting calls from researchers to abolish it.

5 Major Takeaways From Microsoft's July Patch Tuesday

July's updates contained 100+ patches and security policy notes, leaving vulnerability management teams stressed and scrambling to prioritize. We're here to help find some zen.

LATEST FROM DR TECHNOLOGY

Microsoft Takes Security Copilot AI Assistant to the Next Level

The company's AI for security operations centers continues to add integrations, as the industry looks to large language models for progress.

LATEST FROM THE EDGE

10 Features an API Security Service Needs to Offer

Securing APIs is specialized work. Here's what organizations should look for when selecting an outside partner.

LATEST FROM DR GLOBAL

APT35 Develops Mac Bespoke Malware

Iran-linked APT35 group crafted specific Mac malware when targeting a member of the media with new tools to add backdoors.

How to Use Threat Intelligence to Mitigate Third-Party Risk