Dark Reading Daily -- May 04, 2023

Meta Expunges Multiple APT, Cybercrime Groups From Facebook, Instagram

The company has removed three APTs and six potentially criminal networks from its platforms who leveraged elaborate campaigns of fake personas and profiles to lure and compromise users.

Hotels at Risk From Bug in Oracle Property Management Software

Oracle's characterization of the vulnerability in its Opera software as complex and hard to exploit is incorrect, researchers who found the flaw and reported it say.

DNA Sequencing Equipment Vulnerability Adds New Twist to Medical Device Cyber Threats

A vulnerability in a DNA sequencer highlights the expanded attack surface area of healthcare organizations but also shows that reporting of medical device vulnerabilities works.

Google Chrome Drops Browser Lock Icon

Chrome 117 will retire the lock icon and replace it with a "tune" icon, reflecting evolving cybersecurity standards.

Court Rejects Merck Insurers' Attempt to Refuse Coverage for NotPetya Damages

Insurers unsuccessfully argued Merck's $1.4B in losses following NotPetya cyberattack fell under wartime exclusion.

Legitimate Software Abuse: A Disturbing Trend in Ransomware Attacks

Build a culture of security so that everyone is on the lookout for suspect behavior. Implement least privilege, improve visibility.

Anatomy of a Malicious Package Attack

Malicious packages are hard to avoid and hard to detect — unless you know what to look for.

(Sponsored Article) The New Frontier in Email Security: Goodbye, Gateways; Hello, Behavioral AI

As email attackers move to more targeted and sophisticated attacks, email security needs to understand the organization, not past attacks, to keep up with attacker innovation and stop novel threats on the first encounter.

PrivateGPT Tackles Sensitive Info in ChatGPT Prompts

In an effort to curb employees from entering private data into the AI, ChatGPT is blocked from ingesting more than 50+ types of PII and other sensitive information.

4 Principles for Creating a New Blueprint for Secure Software Development

Improving the security of the software development process is key to thwarting bad actors.

North Korean APT Gets Around Macro-Blocking With LNK Switch-Up

APT37 is among a growing list of threat actors that have switched to Windows shortcut files after Microsoft blocked macros last year.

China 'Innovated' Its Cyberattack Tradecraft, Mandia Says

Mandiant CEO Kevin Mandia explains why a recently revealed targeted attack by a cyber-espionage group out of China rivals the SolarWinds attack in its complexity, and weighs in on how defenders can best leverage generative AI.

LATEST FROM THE EDGE

What's the Secret to Finding the Next Big Thing in Cybersecurity?

Varun Badhwar, who has brought each of the three startups he founded to the finals of the RSAC Innovation Sandbox, talks about how to see around the corner.

LATEST FROM DR TECHNOLOGY

Bot Management Aims to Tame Attacker Automation

Websites, cloud services, and API servers are seeing ever more automated traffic — aka bots — forcing companies to find ways to separate the digital wheat from the chaff.

The 10 Most Impactful Types of Vulnerabilities for Enterprises Today