Dark Reading Daily -- November 08, 2023

Marina Bay Sands Becomes Latest Hospitality Cyber Victim

Unknown attackers have accessed PII for hundreds of thousands of loyalty customers at the high-end Singapore establishment.

Atlassian Bug Escalated to 10, All Unpatched Instances Vulnerable

Active ransomware attacks against vulnerable Atlassian Confluence Data Center and Servers ratchets up risk to enterprises, now reflected in the bug's revised CVSS score of 10.

North Korea's BlueNoroff APT Debuts 'Dumbed Down' macOS Malware

Kim Jong-Un's hackers are scraping the bottom of the barrel, using script kiddie-grade malware to steal devalued digital assets.

CVSS 4.0 Offers Significantly More Patching Context

The latest vulnerability severity scoring system addresses gaps in the previous version; here's how to get the most out of it.

Crafting an AI Policy That Safeguards Data Without Stifling Productivity

Companies must recognize AI's utility, while setting clear boundaries to curtail unsafe utilization.

Identity Alone Won't Save Us: The TSA Paradigm and MGM's Hack

To combat sophisticated threats, we need to improve how we approach authorization and access controls.

(Sponsored Article) Sky's the Limit, but What About API Security? Challenges in the Cloud-First Era

APIs enable cloud transformation but bring security risks, demanding robust, adaptive strategies to safeguard data and operations.

Kinsing Cyberattackers Debut 'Looney Tunables' Cloud Exploits

Admins need to patch immediately, as the prolific cybercrime group pivots from cryptomining to going after cloud secrets and credentials.

Virtual Kidnapping: AI Tools Are Enabling IRL Extortion Scams

With AI and publicly available data, cybercriminals have the resources they need to fake a real-life kidnapping and make you believe it.

Ace Hardware Still Reeling From Weeklong Cyberattack

Cyberattackers downed a quarter of the hardware giant's entire IT apparatus. Now, before the company can recover, they're going after individual branches.

Meet Your New Cybersecurity Auditor: Your Insurer

As cyber insurance gets more expensive and competitive, security decision-makers have actionable opportunities to strengthen their cyber defenses.

Middle East's 5G Acceleration May Pose Serious Security Issues

Telcos across the Middle East are rapidly rolling out 5G networks. Will this accelerated adoption lead to higher security vulnerabilities?

Novel Google Cloud RAT Uses Calendar Events for C2

Cybercriminals are abusing legitimate functions within cloud services, and providers can't totally stop them, especially when it comes to innovative approaches like this.

LATEST FROM THE EDGE

Securing Remote Workers Through Zero Trust

Dark Reading’s special report look at how enterprises turning to zero trust to harden the security of their remote workforce. Challenges are steep.

LATEST FROM DR TECHNOLOGY

Software Complexity Bedevils Mainframe Security

The high-performance and resilient platforms satisfy critical roles, but software complexity and the graying of the specialist workforce are creating security challenges.

LATEST FROM DR GLOBAL

Iran-Linked Agrius APT Group Targets Israeli Education, Tech Sectors

The attackers also use custom wipers to cover their tracks and bypass EDR.

Key DevSecOps Principles for Enterprise Mobile App Development