Dark Reading Daily -- October 02, 2023

Move Over, MOVEit: Critical Progress Bug Infests WS_FTP Software

In the wake of Cl0p's MOVEit rampage, Progress Software is sending file-transfer customers scrambling again — this time to patch a critical bug that is easily exploitable with a specially crafted HTTPS POST request.

DHS: Physical Security a Concern in Johnson Controls Cyberattack

An internal memo cites DHS floor plans that could have been accessed in the breach.

Cybersecurity Gaps Plague US State Department, GAO Report Warns

The federal department that oversees the US diplomatic corps abroad suffers a serious lack of visibility into the cyber threats it faces and the security vulnerabilities it's harboring.

Spyware Vendor Targets Egyptian Orgs With Rare iOS Exploit Chain

The Israeli company developed highly-targeted, mobile malware that would make any APT jealous.

People Still Matter in Cybersecurity Management

Cybersecurity's constant stream of shiny new things shouldn't distract managers from their focus on the people they're protecting.

Attacks on Azerbaijan Businesses Drop Malware via Fake Image Files

Images purporting to be of the Armenia and Azerbaijan conflict were malware downloaders in disguise.

(Sponsored Article) Evaluating New Partners and Vendors From an Identity Security Perspective

Before working with new vendors, it's important to understand the potential risks they may pose to your digital environments.

Johnson Controls International Disrupted by Major Cyberattack

The company filed with the SEC and is assessing its operations and financial damages.

New Cisco IOS Zero-Day Delivers a Double Punch

The networking giant discloses new vulnerabilities the same day as warnings get issued that Cisco gear has been targeted in a Chinese APT attack.

How the Okta Cross-Tenant Impersonation Attacks Succeeded

Sophisticated attacks on MGM and Caesars underscore the reality that even robust identity and access management may not be enough to protect you.

4 Legal Surprises You May Encounter After a Cybersecurity Incident

Many organizations are not prepared to respond to all the constituencies that come knocking after a breach or ransomware incident.

Government Shutdown Poised to Stress Nation's Cybersecurity Supply Chain

CISA announces it will furlough more than 80% of staff indefinitely if Congress can't reach an agreement to fund the federal government.

LATEST FROM THE EDGE

How Can Your Security Team Help Developers Shift Left?

Implementing a shift-left process in cybersecurity requires pulling together people, processes, and technology.

LATEST FROM DR TECHNOLGY

A Preview of Windows 11's Passkeys Support

The latest update to Windows 11 introduces support for passkeys, which provide phishing-resistant passwordless authentication.

LATEST FROM DR GLOBAL

Q&A: UK Ambassador on Creating New Cybersecurity Agencies Around the World

How the UK is assisting other nations in forming their own versions of a National Centre for Cybersecurity (NCSC).

How to Deploy Zero Trust for Remote Workforce Security