Dark Reading Daily -- January 07, 2022

New Mac Malware Samples Underscore Growing Threat

A handful of malicious tools that emerged last year showed threat actors may be getting more serious about attacking Apple macOS and iOS environments.

Google Docs Comments Weaponized in New Phishing Campaign

Attackers use the comment feature in Google Docs to email victims and lure them into clicking malicious links.

CDN Cache Poisoning Allows DoS Attacks Against Cloud Apps

A Romanian researcher discovers more than 70 vulnerabilities in how applications and their content delivery networks handle cache misses that open the doors to denial-of-service attacks.

Rethinking Cybersecurity Jobs as a Vocation Instead of a Profession

The prevailing mindset is that security practitioners are professionals, and thus, require a college degree. But there are some flaws in that logic.

Hybrid Multicloud Strategies Are Keeping the Public Sector at the Forefront of Threat Mitigation

Zero trust, DevSecOps, and agile methodologies are critical in bridging the power of commercial multicloud environments and the security of private data centers.

New Mexico's Bernalillo County Investigates Ransomware Attack

A suspected ransomware attack has led Bernalillo County officials to take systems offline and sever network connections.

In the Fight Against Cybercrime, Takedowns Are Only Temporary

Disrupting access to servers and infrastructure continues to interfere with cybercrime activity, but it's far from a perfect strategy.

Attackers Exploit Log4j Flaws in Hands-on-Keyboard Attacks to Drop Reverse Shells

Microsoft says vulnerabilities present a "real and present" danger, citing high volume of scanning and attack activity targeting the widely used Apache logging framework.

Why We Need To Reframe the False-Positive Problem

Efforts to tune or build behavior- or signature-based threat identification requires time and effort most organizations don't have.

EDITORS' CHOICE

New Attack Campaign Exploits Microsoft Signature Verification

The Malsmoke attack group is behind a campaign that has exploited the Microsoft e-signature verification tool to target 2,100 victims.

LATEST FROM THE EDGE

Enterprises Worry About Increased Data Risk in Cloud

The 2021 Strategic Security Survey highlights concerns related to the cloud environment, such as the ability to detect breaches and the increasing number of attacks against cloud systems.

LATEST FROM DR TECHNOLOGY

Darktrace's Dave Masson on Threats Against OT Networks

The latest episode of Tech Talk outlines the risks against operational technology with the OT/IT convergence and shift to the cloud.

How Enterprises Are Assessing Cybersecurity Risk in Today's Environment