Dark Reading Daily -- May 05, 2023

Google Launches Cybersecurity Career Certificate Program

Google's new program aims to offer accessible training to fill 750K open cybersecurity jobs with diverse array of talent.

Microsoft Patches Serious Azure Cloud Security Flaws

Three vulnerabilities in the platform's API Management Service could allow access sensitive data, mount further attacks, and even hijack developer portals.

How to Spot a ChatGPT Phishing Website

Scammers are leveraging the popularity of ChatGPT in phishing attacks. Here's a look at research on these newly registered domains and tactics.

How Public-Private Information Sharing Can Level the Cybersecurity Playing Field

Sharing information is critical to help organizations protect data and systems. To be even more effective, collaboration should be inclusive — vendors, researchers, and private companies large and small.

Dallas City Systems Taken Down by Royal Ransomware

Courts closed, but police, fire rescues unaffected following ransomware attack.

Famine to Feast and Back: Startups Adjust to Economic Realities

Cybersecurity is a hotbed of startup activity, and with good reason. Startups typically look for an IPO or acquisition, but right now IPOs are off the table.

Hotels at Risk From Bug in Oracle Property Management Software

Oracle's characterization of the vulnerability in its Opera software as complex and hard to exploit is incorrect, researchers who found the flaw and reported it say.

Legitimate Software Abuse: A Disturbing Trend in Ransomware Attacks

Build a culture of security so that everyone is on the lookout for suspect behavior. Implement least privilege, improve visibility.

Anatomy of a Malicious Package Attack

Malicious packages are hard to avoid and hard to detect — unless you know what to look for.

Meta Expunges Multiple APT, Cybercrime Groups From Facebook, Instagram

The company has removed three APTs and six potentially criminal networks from its platforms who leveraged elaborate campaigns of fake personas and profiles to lure and compromise users.

LATEST FROM THE EDGE

Identifying Compromised Data Can Be a Logistical Nightmare

Being able to trace an incident backward from breach to data source is vital in restoring and improving cybersecurity.

LATEST FROM DR TECHNOLOGY

Google Expands Passkey Support With Passwordless Authentication

One year after Apple, Google and Microsoft pledged to support the FIDO Alliance’s passkeys standard, support is growing, though still early in adoption.

Successfully Managing Identity in Modern Cloud and Hybrid Environments