Dark Reading Daily -- July 28, 2021

Praying Mantis Threat Group Targeting US Firms in Sophisticated Attacks

Group's advanced memory-resident attacks similar to those employed in sustained campaign against Australian companies and government last year, security vendor says.

Some 65% of Organizations Now Weigh Their 'Cyber Maturity'

New ISACA survey data also shows a 35% increase in cyberattacks over the past year.

Software Time-to-Fix Plateaus as More Apps Tested

The average critical vulnerability took 202 days to fix over the past 12 months, a scarce improvement over 205 days from the prior year.

How CIS Controls v8 Impacts SMBs

The Center for Internet Security has made big changes to its Control specs, including a greater focus on vendor relationships and cloud technologies.

Why Trust Matters for the National Artificial Intelligence Research Resource Task Force

As the National Artificial Intelligence Research Resource Task Force sets about its work preparing recommendations for the creation of an AI research resource in the United States, fundamental problems of trust must be addressed.

Google Debuts New Bug Hunting Platform

The new platform brings bug reporting for all Google targets into one place.

Apple Patches Zero-Day in iOS, iPadOS, macOS

The vulnerability affects IOMobileFramebuffer, a kernel extension for managing the screen framebuffer.

7 Hot Cyber Threat Trends to Expect at Black Hat

A sneak peek of some of the main themes at Black Hat USA next month.

When Software Updates Get Hacked

Darned if you do, darned if you don't: Software fixes have become extensively automated, which works when software supply chains are secure. Yet with attackers focused on compromising those pipelines, is automated patching such a good idea?

Biden Administration Responds to Geopolitical Cyber Threats

In response to growing concerns regarding the recent uptick in large-scale, nation-state-backed ransomware attacks on critical infrastructure, the Biden administration is taking new action to tackle the evolving challenges posed by ransomware attacks.

EDITORS' CHOICE

Attackers' Use of Uncommon Programming Languages Continues to Grow

Attackers use uncommon languages — such as Go, D, Nim, and Rust — to evade detection or make their development process more efficient.

IoT Search Engines Make It Easy to Find Vulnerable Devices, and That's a Problem

Here are five tips to protect your company.

LATEST FROM THE EDGE

How Do I Let Go of 'Human Error' as an Explanation for Incidents?

Successfully learning from incidents requires a deeper and more expansive perspective of them.

The State of Cybersecurity Incident Response