Dark Reading Daily -- July 26, 2023

Patch Now: Up to 900K MikroTik Routers Vulnerable to Total Takeover

Researchers have delivered working exploits for RouterOS, which when combined with default admin passwords can be a recipe for cyber disaster.

ChatGPT, Other Generative AI Apps Prone to Compromise, Manipulation

Researchers find artificial intelligence applications that use large language models could be compromised by attackers using natural language to dupe users.

'FraudGPT' Malicious Chatbot Now for Sale on Dark Web

The subscription-based, generative AI-driven offering joins a growing trend toward "generative AI jailbreaking" to create ChatGPT copycat tools for cyberattacks.

Zero-Day Vulnerabilities Discovered in Global Emergency Services Communications Protocol

Weak encryption algorithms leave radio communications open to attack and abuse.

Cybercrime as a Public Health Crisis

The impact of fraud on a victim's health and well-being can be more painful than the financial loss.

Beyond ChatGPT: Organizations Must Protect Themselves Against the Power of AI

Artificial intelligence-powered threats are already affecting businesses, schools, hospitals, and individuals, and it will only get worse as AI advances.

(Sponsored Article) Architecting XDR to Save Money and Your SOC's Sanity

XDR can lower platform costs and improve detection, but it requires committing to a few principles that go against the established way of thinking about SOC.

Microsoft 365 Breach Risk Widens to Millions of Azure AD Apps

China-linked APT actors could have single-hop access to the gamut of Microsoft cloud services and apps, including SharePoint, Teams, and OneDrive, among many others.

Designing a Security Strategy for Defending Multicloud Architectures

Complex security issues arise when different clouds and computing models interact.

Electrical Grid Stability Relies on Balancing Digital Substation Security

Because digital substations are critical elements of electrical systems, they are a prime target for sophisticated cyberattacks.

10 Free Purple Team Security Tools to Check Out

Check out the curated list of cool tools and platforms for both offensive security experts and defenders which will be released or demoed at Black Hat USA 2023.

LATEST FROM DR TECHNOLOGY

Black Hat Offers Pen-Testing Certification Exam

The new independent exam track at Black Hat USA will feature an opportunity for attendees to take a practical exam to be certified in penetration testing.

LATEST FROM THE EDGE

Kevin Mandia Brings the HammerCon

US Air Force veteran and Mandiant CEO discussed dwell time and state-sponsored attacks at the Military Cyber Professionals Association's HammerCon conference.

LATEST FROM DR GLOBAL

Ivanti Zero-Day Exploit Disrupts Norway's Government Services

Cyberattackers have used a zero-day exploit to compromise up to 12 Norwegian government departments.

How to Use Threat Intelligence to Mitigate Third-Party Risk