Dark Reading Daily -- June 23, 2022

Microsoft 365 Users in US Face Raging Spate of Attacks

A voicemail-themed phishing campaign is hitting specific industry verticals across the country, bent on scavenging credentials that can be used for a range of nefarious purposes.

MetaMask Crypto-Wallet Theft Skates Past Microsoft 365 Security

The credential-phishing attack leverages social engineering and brand impersonation techniques to lead users to a spoofed MetaMask verification page.

Russia's APT28 Launches Nuke-Themed Follina Exploit Campaign

Researchers have spotted the threat group, also known as Fancy Bear and Sofacy, using the Windows MSDT vulnerability to distribute information stealers to users in Ukraine.

80% of Firms Suffered Identity-Related Breaches in Last 12 Months

With almost every business experiencing growth in human and machine identities, firms have made securing those identities a priority.

GitHub's MFA Plans Should Spur Rest of Industry to Raise the Bar

We as industry leaders should be building on what individual platforms like GitHub are doing in two critical ways: demanding third parties improve security and creating more interoperable architectures.

Getting a Better Handle on Identity Management in the Cloud

Treat identity management as a first-priority problem, not something to figure out later while you get your business up and running in the cloud.

Fresh Magecart Skimmer Attack Infrastructure Flagged by Analysts

Don't sleep on Magecart attacks, which security teams could miss by relying solely on automated crawlers and sandboxes, experts warn.

56 Vulnerabilities Discovered in OT Products From 10 Different Vendors

Deep-dive study unearthed security flaws that could allow remote code execution, file manipulation, and malicious firmware uploads, among other badness.

Name That Toon: Cuter Than a June Bug

Feeling creative? Submit your caption and our panel of experts will reward the winner with a $25 Amazon gift card.

Why Financial Institutions Must Double Down on Open Source Investments

Open source is here to stay, and it's imperative that CIOs have a mature, open source engagement strategy, across consumption, contribution, and funding as a pillar of digital transformation.

7 Ways to Avoid Worst-Case Cyber Scenarios

In the wake of devastating attacks, here are some of the best techniques and policies a company can implement to protect its data.

LATEST FROM THE EDGE

Organizations Battling Phishing Malware, Viruses the Most

Organizations may not encounter malware targeting cloud systems or networking equipment frequently, but the array of malware they encounter just occasionally are no less disruptive or damaging. That is where the focus needs to be.

LATEST FROM DR TECHNOLOGY

Credential Sharing as a Service: The Hidden Risk of Low-Code/No-Code

Low-code/no-code platforms allow users to embed their existing user identities within an application, increasing the risk of credentials leakage.

What Every Enterprise Should Know About Security Product Testing