Dark Reading Daily -- November 01, 2023

SEC Charges Against SolarWinds CISO Send Shockwaves Through Security Ranks

The legal actions may have a chilling effect on hiring CISOs, who are already in short supply, but may also expose just how budget-constrained most security executives are.

'Elektra-Leak' Attackers Harvest AWS Cloud Keys in GitHub Campaign

Cyber adversaries are scanning public GitHub repositories in real-time, evading Amazon quarantine controls, and harvesting AWS keys.

'Prolific Puma' Hacker Gives Cybercriminals Access to .us Domains

Cybercriminals are upping their phishing with shortened links and showing that coveted, regulated top-level domains aren't as exclusive as you'd think.

Malware 'Meal Kits' Serve Up No-Fuss RAT Attacks

The wider availability of turnkey cyberattack kits in the criminal underground is leading to a glut of campaigns using remote access Trojans (RATs).

20 Years Later, Is Patch Tuesday Enough?

Microsoft's longstanding practice isn't enough to handle its vulnerability problem.

US Leads 40-Country Alliance to Cut Off Ransomware Payments

The parties within the International Counter Ransomware Initiative intend to use information-sharing tools and AI to achieve their goals of cutting off the financial resources of threat actors.

Survey: AppSec Maturity Hindered by Staffing, Budgets, Vulnerabilities

Report highlights the challenges impeding the applications industry from achieving AppSec maturity.

(Sponsored Article) Securing Modern Enterprises in a Borderless Landscape

CISOs offer recommendations to help secure identities, data, code, and cloud infrastructure and protect against evolving threats and vulnerabilities.

Iran APT Targets the Mediterranean With Watering-Hole Attacks

Nation-state hackers are using hybrids to ensnare those in the maritime, shipping, and logistics industries.

Boeing Breached by Ransomware, LockBit Gang Claims

LockBit gives Boeing a Nov. 2 deadline to pay the ransom or have its sensitive documents leaked to the public, but it hasn't given evidence of the compromise.

What the Boardroom Is Missing: CISOs

From communicating why security should be a priority to advocating for accountability and greater focus on protecting data in the cloud, CISOs can make the case for keeping people and sensitive data secure.

Cybersecurity Awareness Doesn't Cut It; It's Time to Focus on Behavior

We have too much cybersecurity awareness. It's time to implement repeatable, real-world practice that ingrains positive habits and security behaviors.

Biden's Artificial Intelligence Executive Order Covers Broad Concerns

The executive order is ambitious and seeks to protect a variety of different groups that are most at risk from the irresponsible use of AI.

LATEST FROM THE EDGE

Unsolved Cyber Mysteries: Signal Hacking

Episode 1 of Bugcrowd’’s docuseries, Unsolved Cyber Mysteries, describes signal hacking attacks in the 1980s and the potential motivations behind them.

LATEST FROM DR TECHNOLOGY

Understand the True Cost of a UEM Before Making the Switch

When investing in a unified endpoint management solution, prioritize the needs of your network and users ahead of brand names. This Tech Tip focuses on questions to ask.

LATEST FROM DR GLOBAL

Arid Viper Camouflages Malware in Knockoff Dating App

The APT group uses updates from the app to get the user to download the malware.

Tips for a Streamlined Transition to Zero Trust