Dark Reading Weekly -- August 31, 2023

Rackspace Faces Massive Cleanup Costs After Ransomware Attack

Eight months after the cyberattack, the cloud hosting services company's remediation costs top $10 million as it tries to repair the damage caused by the Play ransomware gang.

Meta Cripples China's Signature 'Spamouflage' Influence Op

The social media giant is taking on Dragonbridge, the "largest known cross-platform covert influence operation in the world."

APT Attacks From 'Earth Estries' Hit Gov't, Tech With Custom Malware

A sophisticated threat actor managed to fly under the radar for three years, despite flexing serious muscle.

Sprawling Qakbot Malware Takedown Spans 700,000 Infected Machines

"Operation Duck Hunt" is not likely to eliminate the initial access botnet forever, but the proactive removal of the malware from victim machines by law enforcement is one of the largest and most significant efforts of its kind.

Chinese Group Spreads Android Spyware via Trojan Signal, Telegram Apps

Thousands of devices have become infected with "BadBazaar," malware previously used to spy on Uyghur and Turkic ethnic minorities in China.

Motherboard Mishaps Undermine Trust, Security

MSI and Microsoft warn about new Windows Preview blue screens on some motherboards, the latest mishap to raise questions over the reliability of hardware and firmware.

China Unleashes Flax Typhoon APT to Live Off the Land, Microsoft Warns

The cyber-espionage group has created a stealthy, hard-to-mitigate network of persistent access across a range of organizations, but the endgame is unclear.

Ransomware With an Identity Crisis Targets Small Businesses, Individuals

TZW is the latest version of Adhubllka, which has been active since 2019 but has gone largely unreported due to its lower ransom demands.

5 Best Practices for Implementing Risk-First Cybersecurity

Embracing a risk-first mindset empowers organizations to make informed decisions, strengthen security, safeguard valuable assets, and reduce financial impact.

North Korea's Lazarus APT Uses GUI Framework to Build Stealthy RAT

The world's most notorious threat actor is using an unprecedented tactic for sneaking spyware into the IT networks of important companies.

Financial Firms Breached in MOVEit Cyberattacks Now Face Lawsuits

TD Ameritrade, Charles Schwab named in new class action data breach lawsuit, following last week's filing against Prudential.

Is Bias in AI Algorithms a Threat to Cloud Security?

Using AI for threat detection and response is essential — but it can't replace human intelligence, expertise, and intuition.

Legal Liability for Insecure Software Might Work, but It's Dangerous

Imposing government-regulated security requirements on software companies may go too far and create unintended consequences.

4 Strategies to Safeguard the Finance Industry Against Deepfake Onslaught

Through strategic measures and a united front, the finance industry can overcome the looming threat of deepfakes.

Where and When Automation Makes Sense for Enterprise Security