Dark Reading Daily -- July 20, 2023

Microsoft Relents, Offers Free Key Logging to All 365 Customers

Industry pushback prompts Microsoft to drop premium pricing for access to cloud logging data.

China's APT41 Linked to WyrmSpy, DragonEgg Mobile Spyware

Nation-states see the opportunity in targeting people directly through their mobile phones, in this case with sophisticated Android surveillanceware.

Seed Group Brings Resecurity Options to UAE Region

UAE's Seed Group is partnering with Resecurity to expand cybersecurity options in the Middle East and Africa.

P2P Self-Replicating Cloud Worm Targets Redis

Although not all Redis instances are vulnerable to the P2P worm variant, all of them can expect a compromise attempt, researchers warn.

SophosEncrypt Ransomware Fools Security Researchers

The ransomware-as-a-service offering was first assumed to be a red-team exercise before being detected for true malicious activity.

Reducing Security Debt in the Cloud

Security debt exists in on-premises data centers as well as in cloud platforms — but preventing it from accumulating in the cloud requires different skills, processes, and tools.

3 Ways AI Could Improve Authentication

As companies navigate how to protect themselves from the onslaught of increasingly sophisticated fraud threats, artificial intelligence will be a critical piece of next-gen authentication.

(Sponsored Article) Insider Risk Management Starts With SaaS Security

SaaS security posture management helps mitigate common threats posed by malicious or negligent insiders.

5 Major Takeaways From Microsoft's July Patch Tuesday

July's updates contained 100+ patches and security policy notes, leaving vulnerability management teams stressed and scrambling to prioritize. We're here to help find some zen.

Linux Ransomware Poses Significant Threat to Critical Infrastructure

Organizations running Linux distributions need to prepare to defend their systems against ransomware attacks. Steps to ensure resiliency and basics such as access control reduce major disruptions.

Pernicious Rootkits Pose Growing Blight On Threat Landscape

Attackers show renewed relentlessness in exploiting OS vulnerabilities that also circumvent defense and detection measures.

Google Cloud Build Flaw Enables Privilege Escalation, Code Tampering

Google's fix to the Bad.Build flaw only partially addresses the issue, say security researchers who discovered it.

LATEST FROM DR TECHNOLOGY

Infosec Doesn't Know What AI Tools Orgs Are Using

Hint: Organizations are already using a range of AI tools, with ChatGPT and Jasper.ai leading the way.

LATEST FROM THE EDGE

Protecting Small Businesses From Ransomware on a Budget

One ransomware attack can be devastating for a small or midsize business. Here are four solid survival tips to ensure it doesn't turn into a disaster.

LATEST FROM DR GLOBAL

Study: Africa Cybersecurity Improves but Lacks Cross-Border Frameworks

While cybersecurity preparedness in Africa is on the upswing, the continent still lacks agreements on international security standards and sharing threat intel.

How to Use Threat Intelligence to Mitigate Third-Party Risk