Dark Reading Daily -- January 09, 2023

PurpleUrchin Gang Embraces DevOps in Massive Cloud Malware Campaign

The Automated Libra group is deploying all components of its campaign in an automated manner via containers, stealing free trial resources for cryptomining, but the threat could get larger.

Russia-Linked Turla APT Sneakily Co-Opts Ancient Andromeda USB Infections

Using command-and-control servers from the decade-old Andromeda malware, the group is installing reconnaissance tools and a backdoor on previously infected systems to target Ukrainian victims.

From Ferrari to Ford, Cybersecurity Bugs Plague Automotive Safety

Security vulnerabilities plague automakers, and as vehicles become more connected, a more proactive stance on cybersecurity will be required — alongside regulations.

Don't Be Blindsided by Software Bills of Materials

It's imperative we collaborate and partner to improve software security. This may require developing tools and standards that can enrich SBOMs and provide deeper analysis.

Vice Society Releases Info Stolen From 14 UK Schools, Including Passport Scans

In what's become a pattern, the cybercriminal ring stole data, demanded payment, and posted personal information when ransom was denied.

Five Guys Data Breach Puts HR Data Under a Heat Lamp

Job applicants could face a raft of follow-on attacks after cyber intruders accessed their data in an opportunistic attack.

Rackspace Sunsets Email Service Downed in Ransomware Attack

The hosting services provider shared new details on the breach that took down its Hosted Exchange Email service.

How to Ensure Cybersecurity Investments Remain a Priority Across Your Organization

Collaboration across all business units is key to building a robust cybersecurity program.

In Memoriam: Remembering Those Who Passed

Security stands on the shoulders of giants. We take a moment to remember their contributions toward keeping people, data, and systems safe.

EDITORS' CHOICE

200M Twitter Profiles, With Email Addys, Dumped on Dark Web for Free

A data dump of Twitter user details on an underground forum appears to stem from an API endpoint compromise and large-scale data scraping.

LATEST FROM DR TECHNOLOGY

2023 Will See Renewed Focus on Quantum Computing

Adopting post-quantum cryptography has been discussed for years; now it's time for organizations to get to work.

The Promise and Reality of Cloud Security