Dark Reading Daily -- July 07, 2023

Patchless Cisco Flaw Breaks Cloud Encryption for ACI Traffic

Vulnerable Nexus 9000 Series Fabric Switches in ACI mode should be disabled, Cisco advises.

StackRot Linux Kernel Bug Has Exploit Code on the Way

Linus Torvalds led a Linux kernel team in developing a set of patches for the privilege escalation flaw.

Google Searches for 'USPS Package Tracking' Lead to Banking Theft

Attackers are leveraging well-executed brand impersonation in a Google ads malvertising effort that collects both credit card and bank details from victims.

Botnets Send Exploits Within Days to Weeks After Published PoC

Six months of honeypot data finds that 19% of traffic to sensors were malicious exploit attempts, and 95% of those attempts came from just three botnets.

Shell Becomes Latest Cl0p MOVEit Victim

In another MOVEit attack, oil and gas giant Shell saw the release of the private information of its employees.

Privacy Woes Hold Up Global Instagram Threads Launch

Meta's answer to Twitter went live and quickly racked up millions of members — but the social media app's privacy practices are under the microscope.

CISOs Find 'Business as Usual' Shows the Harsh Realities of Cyber-Risk

C-suite security leaders are feeling less prepared to cope with cyberattacks and more at risk than last year.

Cybersecurity's Future Hinges on Stronger Public-Private Partnerships

Public and private sector organizations must collaborate on a shared cybersecurity agenda to protect and benefit society at large.

Microsoft Can Fix Ransomware Tomorrow

You can't encrypt a file you can't open — Microsoft could dramatically impact ransomware by slowing it down.

A Golden Age of AI … or Security Threats?

Now is the time to build safeguards into nascent AI technology.

Microsoft Teams Exploit Tool Auto-Delivers Malware

The "TeamsPhisher" cyberattack tool gives pen testers — and adversaries — a way to deliver malicious files directly to a Teams user from an external account, or tenant.

Cl0p's MOVEit Campaign Represents a New Era in Cyberattacks

The ransomware group shows an evolution of its tactics with MOVEit zero-day — potentially ushering in a new normal when it comes to extortion supply chain cyberattacks, experts say.

LATEST FROM DR TECHNOLOGY

Startup Spotlight: Endor Labs Focuses on Reachability

The company, one of four finalists in Black Hat USA's 2023 startup competition, looks to find the vulnerabilities an attacker could actually access.

LATEST FROM THE EDGE

Mitigating Risk With Threat Intelligence

Dark Reading's latest special report looks at a missing, but necessary, ingredient to effective third-party risk management.

LATEST FROM DR GLOBAL

African Nations Face Escalating Phishing & Compromised Password Cyberattacks

Cyberattacks against organizations in some African nations increased significantly in 2022, despite a major expansion in cybersecurity hiring to support cloud and digital migration.

How to Use Threat Intelligence to Mitigate Third-Party Risk