Dark Reading Daily -- September 05, 2023

NYC Subway Disables Trip-History Feature Over Tap-and-Go Privacy Concerns

The move by New York's Metropolitan Transit Authority (MTA) follows a report that showed how easy it is for someone to pull up another individual's seven-day ride history through the One Metro New York (OMNY) website.

MSSQL Databases Under Fire From FreeWorld Ransomware

The sophisticated attacks, tracked as DB#JAMMER, run shell commands to impair defenses and deploy tools to establish persistence on the host.

Inaugural Pwn2Own Automotive Contest Dangles $1M for Car Hackers

The competition encourages automotive research and allows for contestants to take part in person or remotely.

Key Group Ransomware Foiled by New Decryptor

Researchers crack Key Group's ransomware encryption and release free tool for victim organizations to recover their data.

Proposed SEC Cybersecurity Rule Will Put Unnecessary Strain on CISOs

The Security and Exchange Commission's Proposed Rule for Public Companies (PPRC) is ambiguous.

Realism Reigns on AI at Black Hat and DEF CON

Realistic expectations and caution began to replace wonder and confusion for generative AI at the recent security industry gatherings.

(Sponsored Article) Visibility Is Just Not Enough to Secure Operational Technology Systems

Visibility is just the first step to secure your operational technology environment against today's threats. You need a proactive, defense-in-depth approach.

A Brief History of ICS-Tailored Attacks

It's on the cyber defenders to learn from the past and make industrial control system networks hostile to attackers.

Cyberattackers Swarm OpenFire Cloud Servers With Takeover Barrage

The Kinsing threat group has launched more than 1,000 cyberattacks in less than two months, exploiting a security vulnerability in the internal corporate messaging app in order to upload the malware and a cryptominer.

Paramount, Forever 21 Data Breaches Set Stage for Follow-on Attacks

The Forever 21 breach alone affects a half-million people, who could be a mix of consumers and employees; Paramount is staying mum on who exactly is impacted.

Cybercriminals Team Up to Upgrade 'SapphireStealer' Malware

A hacker published a real gem of an infostealer to GitHub that requires zero coding knowledge to use. Then a community sprung up around it, polishing the code to a high shine and creating new, even more robust features.

LATEST FROM THE EDGE

Confusion Surrounds SEC's New Cybersecurity Material Rule

Determining what to report and which details to disclose are complex questions with elusive answers.

LATEST FROM DR TECHNOLOGY

Will the AI Arms Race Lead to the Pollution of the Internet?

Content creators want to protect their intellectual property from AI by poisoning data. Could this destroy the machine learning ecosystem?

LATEST FROM DR GLOBAL

US Government Denies Blocking Sales of AI Chips to Middle East

Nvidia and AMD do face expanded export rules for their A100 and H100 artificial intelligence (AI) chips in the Middle East, but it's not yet clear why.

How Supply Chain Attacks Work, and How to Stop Them