Dark Reading Daily -- December 12, 2023

Analysis shows evidence the previously unknown Sandman group shares backdoor malware with various Chinese APT groups.

LATEST SECURITY NEWS & COMMENTARY

Microsoft: Mystery Group Targeting Telcos Linked to Chinese APTs

Analysis shows evidence the previously unknown Sandman group shares backdoor malware with various Chinese APT groups.

Cybercrime Orgs Increasingly Use Human Trafficking to Staff Scam Mills

Interpol breaks up Southeast Asian cybercrime rings, rescuing 149 victims of human trafficking, but the agency warns the human cost of cybercrime is mounting across the globe.

Lazarus Group Is Still Juicing Log4Shell, Using RATs Written in 'D'

The infamous vulnerability may be on the older side at this point, but North Korea's primo APT Lazarus is creating new, unique malware around it at a remarkable clip.

Convincing LinkedIn 'Profiles' Target Saudi Workers for Information Leakage

Social engineering attacks in the Kingdom collect information on professionals — and offer fake profiles for sale.

Ghana Official to Head Africa's New Cybersecurity Authority

ANCA comprises 17 members, representing less than half of the countries in Africa.

Responsibly Implementing AI, the Unstoppable Force

Balancing the good and bad of AI/ML means being able to control what data you're feeding into AI systems and solving the privacy issues to securely enable generative AI.

(Sponsored Article) Balancing Simplicity and Security in the Digital Experience

New data shows consumer preferences for security in digital experiences and indicates ways businesses can best protect digital identity in today's digital world.

MORE NEWS / MORE COMMENTARY


HOT TOPICS
Microsoft: Mystery Group Targeting Telcos Linked to Chinese APTs Analysis shows evidence the previously unknown Sandman group shares backdoor malware with various Chinese APT groups. Making Cyber Insurance Available for Small Biz, Contractors Cyber insurance companies are moving down-market to offer policies to help protect remote employees, independent contractors, and small businesses from the cost of cyberattacks. The 3 Most Prevalent Cyber Threats of the Holidays Chaos and volume of holiday season sales make a perfect storm of threat opportunity. Companies need to prepare — and practice! — action plans, identify key stakeholders, and consider cyber insurance. 4 Metrics That Help CISOs Become Strategic Partners With the Board To demonstrate the CISO role's value, frame your work using metrics that align with the most critical parts of every business: risk, growth, expenses, and people. MORE

PRODUCTS & RELEASES

Fortress Information Security & CodeSecure Team Up to Analyze SBOMs & Remediate Critical Vulnerabilities

CISOs See Software Supply Chain Security as Bigger Blind Spot Than GenAI: Cycode

ProvenRun Secures €15M Series A to Accelerate its Growth

Cybersixgill Announces Identity Intelligence Module for Threat Analysis

MORE PRODUCTS & RELEASES

EDITORS' CHOICE

Apple: 2.5B Records Exposed, Marking Staggering Surge in Data Breaches

Data breaches are rapidly accelerating, according to a number-crunching report from Apple this week — heightening the need to finally implement end-to-end data encryption.

LATEST FROM THE EDGE

10 Holiday Gifts for Stressed-Out Security Pros

These office giving-friendly fidgets, stress balls, brain teasers, and more are perfect to calm the most harried cybersecurity professionals.

LATEST FROM DR TECHNOLOGY

The European Space Agency Explores Cybersecurity for Space Industry

An ESA cybersecurity expert explains how space-based data and services benefit from public investment in space programs.

LATEST FROM DR GLOBAL

Russian Espionage Group Hammers Zero-Click Microsoft Outlook Bug

State-sponsored actors continue to exploit CVE-2023-23397, a dangerous no-interaction vulnerability in Microsoft's Outlook email client that was patched in March, in a widespread global campaign.

WEBINARS

What's In Your Cloud?
SecOps & DevSecOps in the Cloud
Security teams today face the dual challenge of securing cloud-native applications as well as their software development processes that increasingly operate in the cloud. At the same time, attacks are rising against misconfigured cloud instances as well as a new ...

View More Dark Reading Webinars >>

WHITE PAPERS

View More White Papers >>

FEATURED REPORTS

Passwords Are Passe: Next Gen Authentication Addresses Today's Threats
How to Use Threat Intelligence to Mitigate Third-Party Risk
The report discusses the various steps of a continuous third-party intelligence lifecycle: Data collection, Data classification, Data storage, Data analysis, reporting, dissemination, continuous monitoring, data governance, and choosing the right technology stack. The report also includes information about how attackers ...
Securing the Remote Worker: How to Mitigate Off-Site Cyberattacks
The most profound change to enterprise security with the rise of remote work is the way endpoint security has moved from last line of defense to being on the frontline. The user's endpoint is the first device attackers encounter, making ...

View More Dark Reading Reports >>