Dark Reading Daily -- July 31, 2024

With sufficient privileges in Active Directory, attackers only have to create an "ESX Admins" group in the targeted domain and add a user to it.

LATEST SECURITY NEWS & COMMENTARY

Ransomware Gangs Exploit ESXi Bug for Instant, Mass Encryption of VMs

With sufficient privileges in Active Directory, attackers only have to create an "ESX Admins" group in the targeted domain and add a user to it.

Cyberattackers Accessed HealthEquity Customer Info via Third Party

Data thieves heisted the HSA provider's data repository for 4.5 million people's HR information, including employer and dependents intel.

Criminal Hackers Add GenAI Credentials to Underground Markets

According to the study, around 400 stolen GenAI credentials are being sold by threat actors per day.

Dynamically Evolving SMS Stealer Threatens Global Android Users

A network of more than 2,600 Telegram bots has helped exfiltrate one-time passwords and data from devices for more than two years.

India-Linked SideWinder Group Pivots to Hacking Maritime Targets

The nation-state espionage group known for attacking Pakistan has expanded its reach to targets in Egypt and Sri Lanka.

The CrowdStrike Meltdown: A Wake-up Call for Cybersecurity

The incident serves as a stark reminder of the fragility of our digital infrastructure. By adopting a diversified, resilient approach to cybersecurity, we can mitigate the risks and build a more secure digital future.

MORE NEWS / MORE COMMENTARY


HOT TOPICS
OAuth+XSS Attack Threatens Millions of Web Users With Account Takeover An attack flow that combines API flaws within "log in with" implementations and Web injection bugs could affect millions of websites. Patch Now: ServiceNow Critical RCE Bugs Under Active Exploit One threat actor claims to have already gathered email addresses and associated hashes from more than 110 remote IT management databases. 7 Sessions Not to Miss at Black Hat USA 2024 This year's conference will be a treasure trove of insights for cybersecurity professionals. Unexpected Lessons Learned From the CrowdStrike Event How your organization can leverage the disruptive CrowdStrike update to become more resilient. MORE

PRODUCTS & RELEASES

Heimdal Security Presents its Latest Report on Brute-Force Cyberattacks

Cowbell Secures $60 Million Series C Funding From Zurich Insurance Group

Lakera Raises $20M Series A to Secure Generative AI Applications

MORE PRODUCTS & RELEASES

EDITORS' CHOICE

Make Your Voice Heard!

Tell Dark Reading about your cybersecurity budget challenges and concerns, such as a rise in cyberattacks, ransomware, or attacks on software supply chains and partners. Take our survey, and you could could win one of 10 $50 Amazon gift cards to be given away through a random drawing.

LATEST FROM THE EDGE