Dark Reading Daily -- May 10, 2023

Microsoft Patches 2 Zero-Day Vulnerabilities

The 49 CVEs in Microsoft's May security update is the lowest volume in nearly two years.

FBI Disarms Russian FSB 'Snake' Malware Network

Operation "Medusa" disabled Turla's Snake malware with an FBI-created tool called Perseus.

SideWinder Strikes Victims in Pakistan, Turkey in Multiphase Polymorphic Attack

The APT is exploiting a remote template injection flaw to deliver malicious documents that lure in government officials and other targets with topics of potential interest.

Royal Ransomware Expands to Target Linux, VMware ESXi

The ransomware gang has also started using the BatLoader dropper and SEO poisoning for initial access.

Npm Packages Vulnerable to Old-School Weapon: the 'Shift' Key

For years, hackers could have tricked enterprises into downloading malware by simply de-capitalizing letters in uppercase-named npm packages.

The Problem of Old Vulnerabilities — and What to Do About It

The vulnerabilities most often exploited by ransomware attackers are already known to us.

Keep Your Company Cyber Competent Without Adding Cyber Anxiety

With the right attitude, businesses can maximize employee satisfaction and protection, without sacrificing productivity.

Justice Department Targets 13 Websites Linked to DDoS-for-Hire

Ten of the domains targeted today were "reincarnations" of services seized in December 2022.

North Korean APT Uses Malicious Microsoft OneDrive Links to Spread New Malware

ReconShark, aimed at gaining initial access to targeted systems, is a component of previous malware used by the Kimsuky group.

Judge Spares Former Uber CISO Jail Time Over 2016 Data Breach Charges

Tell other CISOs "you got a break," judge says in handing down a three-year probation sentence to Joseph Sullivan.

Why the FTX Collapse Was an Identity Problem

Cryptocurrency has a valuable role to play in a Web3 world — but only if the public can fully trust it.

1M NextGen Patient Records Compromised in Data Breach

Company says a database was accessed by an "unknown third party" with stolen credentials.

LATEST FROM THE EDGE

Identifying Compromised Data Can Be a Logistical Nightmare

Being able to trace an incident backward from breach to data source is vital in restoring and improving cybersecurity.

LATEST FROM DR TECHNOLOGY

New Startup SquareX Targets Brower-Based Attacks

SquareX runs headless browsers in data centers on the user's behalf so that threats never reach the user's machine.

How Enterprises Are Managing Application Security Risks in a Heightened Threat Environment