Dark Reading Daily -- August 18, 2023

LinkedIn Suffers 'Significant' Wave of Account Hacks

Users report losing access to their accounts, with some being pressured into paying a ransom to get back in or else face permanent account deletion.

Researchers Trick an iPhone Into Faking Airplane Mode

How mobile attackers could gaslight iPhone users, allowing the perfect cover for post-exploitation malicious activity.

'Play' Ransomware Group Targeting MSPs Worldwide in New Campaign

Attackers use remote monitoring and management tools at MSPs to gain unfettered access to target networks.

Cyber Defenders Lead the AI Arms Race for Now

Cyberattackers are slow to implement AI in their attack chains, according to Mandiant's analysis.

How Innovation Accelerators Are at Work on the Dark Side

Digital commerce remains the richest target for cybercriminals, yet physical payment threats remain strong.

White House Orders Federal Agencies to Bolster Cyber Safeguards

A Biden administration adviser puts federal departments and agencies on notice to come into full compliance with presidential guidelines by the end of the year.

(Sponsored Article) How to Choose a Managed Detection and Response (MDR) Solution

MDR empowers organizations with enhanced security. Look for these four capabilities when selecting an MDR product.

Boards Don't Want Security Promises — They Want Action

CISOs must demonstrate that security processes and updates reduce risk in measurable ways. Put emphasis on action, get the basics right, and improve processes.

Mirai Common Attack Methods Remain Consistent, Effective

While relatively unchanged, the notorious IoT botnet still continues to drive DDoS.

The Gulf's Dizzying Tech Ambitions Present Risk & Opportunity

Threats and opportunities are abound for the UAE and Gulf states, so can they deal with being a cybersecurity stronghold?

QR Code Phishing Campaign Targets Top US Energy Company

Attackers sent more than 1,000 emails with 2FA, MFA, and other security-related lures aimed at stealing Microsoft credentials.

PowerShell Gallery Prone to Typosquatting, Other Supply Chain Attacks

Microsoft is aware of the issue, but so far its attempts to address it don't appear to have worked, the vendor says.

LATEST FROM THE EDGE

Confusion Surrounds SEC's New Cybersecurity Material Rule

Determining what to report, and what details to disclose, is a complex question with elusive answers.

LATEST FROM DR TECHNOLOGY

Fastly Launches Certainly CA

The company’s moves to expand its TLS and domain name services strengthens the security and trust of its global web infrastructure.

LATEST FROM DR GLOBAL

An Overview of Dubai's First and Second Cybersecurity Strategy

Security demands a strong fortress in cyberspace, and Dubai has rolled out two cybersecurity strategies to protect the data of the government and citizens.

Where and When Automation Makes Sense for Enterprise Security