Dark Reading Daily -- December 06, 2022

Infostealer Malware Market Booms, as MFA Fatigue Sets In

The successful combo of stolen credentials and social engineering to breach networks is increasing demand for infostealers on the Dark Web.

Wiper, Disguised as Fake Ransomware, Targets Russian Orgs

The program, dubbed CryWiper, is aimed at Russian targets; it requests a ransom but has no way to decrypt any overwritten files.

Malware Authors Inadvertently Take Down Own Botnet

A single improperly formatted command has effectively killed KmsdBot botnet, security vendor says.

Ransomware Professionalization Grows as RaaS Takes Hold

As ransomware's prevalence has grown over the past decade, leading ransomware groups such as Conti have added services and features as part of a growing trend toward professionalization.

Hive Social Buzzing With Security Flaws, Analysts Warn

Twitter alternative Hive Social took down its servers after researchers discovered several critical vulnerabilities.

Cyberattack Shuts Down French Hospital

Patients transferred and operations canceled following a recent network breach at a hospital in the outskirts of Paris.

The Privacy War Is Coming

Privacy standards are only going to increase. It's time for organizations to get ahead of the coming reckoning.

SiriusXM, MyHyundai Car Apps Showcase Next-Gen Car Hacking

A trio of security bugs allow remote attackers to unlock or start the car, operate climate controls, pop the trunk, and more — all via poorly coded mobile apps.

SOC Turns to Homegrown Machine Learning to Catch Cyber Intruders

A do-it-yourself machine learning system helped a French bank detect three types of exfiltration attacks missed by current rules-based systems, attendees will learn at Black Hat Europe.

A Risky Business: Choosing the Right Methodology

Rather than regarding risk assessment as a negative exercise, consider it one that benefits your organization's aims, and then translate the risk level to its impact on operations, reputation, or finances.

Where Advanced Cyberttackers Are Heading Next: Disruptive Hits, New Tech

Following a year of increasingly disruptive attacks, advanced persistent threat groups will likely only become emboldened in 2023, security experts say.

LATEST FROM THE EDGE

Cybersecurity Should Focus on Managing Risk

Preventing all data breaches is an unrealistic goal. Instead, focus on finding and minimizing the greatest risks.

LATEST FROM DR TECHNOLOGY

Cybersecurity 'Nutrition' Labels Still a Work in Progress

Pretty much every aspect of the effort to create easy-to-understand labels for Internet of Things (IoT) products is up in the air, according to participants in the process.

Developing and Testing an Effective Breach Response Plan