CSO US First Look
The day's top cybersecurity news and in-depth coverage
August 07, 2023
Ransomware victim numbers surge as attackers target zero-day vulnerabilities
Ransomware groups are also prioritizing the exfiltration of files, which has become the primary source of extortion. Read more
Will CVSS 4.0 be a vulnerability-scoring breakthrough or is it broken?
The soon-to-be-released scoring system update has promise, but challenges remain for it to deliver exactly what CISOs need to get ahead of the latest vulnerabilities. Read more
Researchers warn Amazon's AWS System Manager agent can be used as a RAT
Mitiga researchers found that the AWS SSM agent could be hijacked and turned into a remote access trojan that is difficult to detect. Read more
Russian cyberspies defeat Microsoft number-matching 2FA policy with fake Teams messages
Spear-phishing attacks by the Midnight Blizzard advanced persistent threat group targeted Microsoft 365 tenants of small businesses. Read more
UK calls artificial intelligence a âchronic riskâ to its national security
The National Risk Register officially classes AI as a long-term security threat to the UKâs safety and critical systems. Read more
Cybersecurity startups to watch for in 2023
These startups are jumping in where most established security vendors have yet to go. Read more