Dark Reading Daily -- November 16, 2023

Rackspace Ransomware Costs Soar to Nearly $12M

Rackspace's 2022 ransomware attack costs only continue to mount, with lawsuits in the offing — and show the long-tail costs of a cyberattack.

'AlphaLock' Hacker Organization Launches Pen-Testing Training Group

With a two-pronged approach, the group trains its hackers in penetration testing, only to set them free to build a marketplace for pen-testing services.

Oil Giant Aramco Drills Down on Saudi ICS Security

Saudi Arabia's national oil and gas company is investing in an operational technology security training academy for organizations across the Kingdom.

Cyber Resilience Requires Maturity, Persistence & Board Engagement

Women in Cyber Security Middle East highlight a requirement for resilience in the face of increased business and cyber challenges.

After Critical Bug Disclosures, TETRA Emergency Comms Code Goes Public

After the encryption algorithm used by public safety, military, and governments globally was found to allow eavesdropping, standard maintainers are making TETRA open source.

Defending Against Attacks on Vulnerable IoT Devices

Organizations must approach cybersecurity as if they are defending themselves in a cyberwar.

(Sponsored Article) SaaS Vendor Risk Assessment in 3 Steps

SaaS applications are the new supply chain and, practically speaking, SaaS is the modern vendor. Here are three straightforward steps to manage this new vendor risk.

21 Vulnerabilities Discovered in Crucial IT-OT Connective Routers

In this Black Hat Europe preview, devices bridging critical machinery with the wider Internet are exposed and subject to numerous supply chain-induced bugs.

Steps CISOs Should Take Before, During & After a Cyberattack

By creating a plan of action, organizations can better respond to attacks.

Royal Ransom Demands Exceed $275M, Rebrand in Offing

The swift-moving ransomware crew continues to evolve quickly and has already attacked more than 350 victims since it was first detected just over a year ago.

'Hunters International' Cyberattackers Take Over Hive Ransomware

Hunters International appears to have acquired Hive ransomware from its original operators and may be seeking to cash in on the malware's reputation.

Microsoft Zero-Days Allow Defender Bypass, Privilege Escalation

Another two bugs in this month's set of fixes for 63 CVEs were publicly disclosed previously but have not been exploited yet.

LATEST FROM THE EDGE

EU Tightens Cybersecurity Requirements for Critical Infrastructure and Services

Organizations in "essential" sectors have until October 2024 to comply with the Network and Information Systems Directive 2022 (NIS2).

LATEST FROM DR TECHNOLOGY

First Wave of Vulnerability-Fixing AIs Available for Developers

GitHub joins a handful of startups and established firms in the market, but all the products are essentially "caveat developer" — let the developer beware.

LATEST FROM DR GLOBAL

Qatar & Rwanda Partner to Boost Cybersecurity in Africa

The two countries will work on AI security guardrails, public key infrastructure, smart city cyber, and more.

Tips for a Streamlined Transition to Zero Trust