Dark Reading Daily -- July 27, 2023

Massive macOS Campaign Targets Crypto Wallets, Data

Threat actors are distributing new "Realst" infostealer via fake blockchain games, researchers warn.

Peloton Bugs Expose Enterprise Networks to IoT Attacks

Hackers have three key pathways — the OS, apps, and malware — for leveraging the popular home fitness equipment as initial access for data. compromise, ransomware, and more

'Nitrogen' Ransomware Effort Lures IT Pros via Google, Bing Ads

Forget temps and new employees. A new malicious campaign compromises organizations through a high risk, high reward vector: IT professionals.

SEC Adopts New Rule on Cybersecurity Incident Disclosure Requirements

Boards must now file notice of a "material incident" within four business days, although questions remain.

Thales Agrees to Buy App Security Vendor Imperva in $3.6B Deal

The deal is expected to give the French vendor a larger presence in the application and API security markets, as well as in North America.

Kubernetes and the Software Supply Chain

Trusted content is paramount in securing the supply chain.

Cybercrime as a Public Health Crisis

The impact of fraud on a victim's health and well-being can be more painful than the financial loss.

Former NSA-er Harry Coker Nominated National Cyber Director

The potential nominee is coming in with a model resume and background in cyberspace, as well as strong political support from the Hill.

(Sponsored Article) How to Use Log Management to Retrace Your Digital Footsteps

Log management tools help IT and security teams monitor and improve a system's performance by identifying bugs, cybersecurity breaches, and other issues that can create outages or compliance problems.

'FraudGPT' Malicious Chatbot Now for Sale on Dark Web

The subscription-based, generative AI-driven offering joins a growing trend toward "generative AI jailbreaking" to create ChatGPT copycat tools for cyberattacks.

10 Free Purple Team Security Tools to Check Out

Check out the curated list of cool tools and platforms for both offensive security experts and defenders which will be released or demoed at Black Hat USA 2023.

Beyond ChatGPT: Organizations Must Protect Themselves Against the Power of AI

Artificial intelligence-powered threats are already affecting businesses, schools, hospitals, and individuals, and it will only get worse as AI advances.

Designing a Security Strategy for Defending Multicloud Architectures

Complex security issues arise when different clouds and computing models interact.

Patch Now: Up to 900K MikroTik Routers Vulnerable to Total Takeover

Researchers have delivered working exploits for RouterOS, which when combined with default admin passwords can be a recipe for cyber disaster.

LATEST FROM DR TECHNOLOGY

Kyndryl Expands Managed Security Services With More SOC Options

The "SOC as a platform" offers organizations with integrated security and IT operations management.

LATEST FROM THE EDGE

Companies Must Have Corporate Cybersecurity Experts, SEC Says

Enterprises now must describe their management's expertise in cybersecurity. But what exactly does that entail?

LATEST FROM DR GLOBAL

ETSI Dismisses Claims of 'Backdoor' Vulnerabilities in TETRA Standard

Nonetheless, European standards body revised the wireless standard and insists its integrity remains sound.

How to Use Threat Intelligence to Mitigate Third-Party Risk