Dark Reading Daily -- February 28, 2023

How the Ukraine War Opened a Fault Line in Cybercrime, Possibly Forever

Infighting, conscription, emigration. The war in Ukraine has pitted cybercriminals against one another like no other event before it.

Attackers Were on Network for 2 Years, News Corp Says

The publisher of the Wall Street Journal, New York Post, and several other publications had last year disclosed a breach it said was the work of a state-backed actor likely working for China.

Mobile Banking Trojans Surge, Doubling in Volume

Mobile malware developers were busy bees in 2022, flooding the cybercrime landscape with twice the number of banking trojans than the year before.

As Social Engineering Attacks Skyrocket, Evaluate Your Security Education Plan

Build a playbook for employees on how to handle suspicious communications, use mail filters, and screen and verify unfamiliar calls to bolster a defensive social engineering security strategy.

Wiz Reaches $10B Valuation With Consolidated Cloud Security Platform

Cloud security vendor Wiz has raised $900 million since its founding in 2020.

(Sponsored Article) Generative AI Changes Everything We Know About Cyberattacks

Generative AI is heating up everywhere and fundamentally changing everything we know about how cybercriminals develop and deploy attacks.

Canadian Telecom Firm Telus Reportedly Investigating Breach

A threat actor has leaked data — purportedly, samples of Telus employee payroll data and source code — on a hacker site.

To Safeguard Critical Infrastructure, Go Back to Basics

CISA's recently released cybersecurity performance goals can help lower risk and thwart the impact of cyberattacks.

Wiper Malware Surges Ahead, Spiking 53% in 3 Months

Cybercriminals and hacktivists have joined state-backed actors in using sabotage-bent malware in destructive attacks, new report shows.

Why Are My Employees Integrating With So Many Unsanctioned SaaS Apps?

Before adopting SaaS apps, companies should set security guardrails to vet new vendors and check security integration for misconfiguration risks.

'New Class of Bugs' in Apple Devices Opens the Door to Complete Takeover

With the right kind of exploit, there's hardly any function, app, or bit of data an attacker couldn't access on your Mac, iPad, or iPhone.

LATEST FROM THE EDGE

All CVEs Are Not Created Equal

Vulnerabilities impact each industry differently, so each sector needs to think about its defenses and vulnerability management differently.

LATEST FROM DR TECHNOLOGY

How to Reduce Code Risk Using Pipelineless Security

The exposure and exploitation of hardcoded secrets continues to drive software supply chain attacks. One solution: zero new hardcoded secrets.

The Promise and Reality of Cloud Security