Dark Reading Daily -- October 11, 2023

Microsoft Patch Tuesday Haunted by Zero-Days, Wormable Bug

October's CVE update is here. Here's which security vulnerabilities to patch now to exorcise your Microsoft systems demons.

Internet-Wide Zero-Day Bug Fuels Largest-Ever DDoS Event

Ongoing Rapid Reset DDoS flood attacks exposed organizations need to patch CVE-2023-44487 immediately to head off crippling outages and business disruption.

North Korea's State-Sponsored APTs Organize & Align

An unprecedented collaboration by various APTs within the DPKR makes them harder to track, setting the stage for aggressive, complex cyberattacks that demand strategic response efforts, Mandiant warns.

Hackers for Hire Hit Both Sides in Israel-Hamas Conflict

DDoS for hire and live attacks hit both sides as cyber campaigns continue.

How Keyloggers Have Evolved From the Cold War to Today

Keyloggers have been used for espionage since the days of the typewriter, but today's threats are easier to get and use than ever.

Old-School Attacks Are Still a Danger, Despite Newer Techniques

The cold, hard truth? Cybercriminals are still perpetuating plenty of unsophisticated attacks for a simple reason: They work.

Badbox Operation Targets Android Devices in Fraud Schemes

Researchers believe that more than 70,000 Android devices may have been affected.

(Sponsored Article) The Need for Speed: When Cloud Attacks Take Only 10 Minutes

Security sensors are common in the home for both prevention and response in the event something goes wrong. But in the cloud, have you taken the same approach?

Too Rich to Ransomware? MGM Brushes Off $100M in Losses

MGM wins big bet that choosing days of operations outages is a better business decision than paying a ransom, following last month's data breach.

Cybersecurity Talent in America: Bridging the Gap

It's past time to reimagine how to best nurture talent and expand recruiting and training to alleviate the shortage of trained cybersecurity staff. We need a diverse talent pool trained for tomorrow's challenges.

Patch Now: Massive RCE Campaign Wrangles Routers Into Botnet

Thousands of devices, including D-Link and Zyxel gear, remain vulnerable to takeover despite the availability of patches for the several bugs being exploited by IZ1H9 campaign.

Could Cybersecurity Breaches Become Harmless in the Future?

With these five steps, organizations can develop stronger security practices and make the inevitable breaches inconsequential.

'Looney Tunables' Linux Flaw Sees Snowballing Proof-of-Concept Exploits

Following the publication of the critical Linux security vulnerability, security specialists released PoC exploits to test the implications of CVE-2023-4911.

LATEST FROM THE EDGE

QR Code 101: What the Threats Look Like

Because QR codes can be used for phishing as easily as an email or text can, organizations must remain vigilant when dealing with them.

LATEST FROM DR TECHNOLOGY

Protect AI Releases 3 AI/ML Security Tools as Open Source

The company released NB Defense, ModelScan, and Rebuff, which detect vulnerabilities in machine learning systems, on GitHub.

LATEST FROM DR GLOBAL

Hacktivists Enter Fray Following Hamas Strikes Against Israel

Killnet, Anonymous Sudan, along with other groups, pick up up their Middle East activities as war breaks out.

The State of Supply Chain Threats