Dark Reading Daily -- August 01, 2023

Summer Documentary Watch Party: 8 Sizzling Cybersecurity Tales

From the upcoming Billion Dollar Heist to docs on the Ashley Madison breach and Stuxnet, here are a bevy of films that can scratch that wanna-be hacker itch.

China's Volt Typhoon APT Burrows Deeper Into US Critical Infrastructure

US officials are concerned that the Beijing-directed cyberattacks could be a precursor to military disruption and broader destructive attacks on citizens and businesses.

Air-Gapped ICS Systems Targeted by Sophisticated Malware

Researchers uncovered new worming second-stage tools used to locally exfiltrate data from air gapped ICS environments, putting threat actors one step away from transmission of the info to a C2.

Abyss Locker Ransomware Looks to Drown VMware's ESXi Servers

The 4-month-old ransomware gang is now actively targeting VMware's virtual environments with a second variant of its custom malware.

Call of Duty Self-Spreading Worm Takes Aim at Player Lobbies

The revival of the beloved online multiplayer video game was short-lived once players detected unusual activity and behavior that portended malware.

Best Practices for Enterprise Private 5G Security

Omdia's latest research with Trend Micro and CTOne sheds light on 5G security challenges and ways to effectively extend enterprise-grade security to 5G networks

(Sponsored Article) Why CFOs & CISOs Must Collaborate to Strengthen and Protect Organizations in a Recession

Cyber threats are intensifying even as budgets are being scrutinized. Now, more than ever, security and finance professionals need to align on cybersecurity strategies.

Millions of People Affected in MOVEit Attack on US Gov't Vendor

Living up to its name, Maximus sees a whale of a breach that affects millions of people's sensitive government records, including health data.

Ubuntu Linux Cloud Workloads Face Rampant Root Take Takeovers

Some 40% of Ubuntu Linux cloud workloads subject to GameOverlay security bugs in the OverlayFS module.

IT Ops and Security Teams Need Automation, Not Couples Therapy

When their roles intersect, IT ops and security teams often find themselves at odds. Here are some ways to foster collaboration.

Why Today's CISOs Must Embrace Change

With change happening faster than ever before, tools can help bridge capability gaps, along with accelerated workforce training.

Another AI Pitfall: Digital Mirroring Opens New Cyberattack Vector

The more artificial intelligence builds out our digital personas, the easier it will become for bad actors to target us with more convincing attacks.

LATEST FROM THE EDGE

Why CISOs Should Get Involved With Cyber Insurance Negotiation

Everyone benefits — the CISO, the company, and the insurer — when CISOs are included in arranging cyber insurance.

LATEST FROM DR TECHNOLOGY

What Implementing Biometrics for Authentication Looks Like

CISOs are incorporating biometrics as part of their multifactor authentication strategies. This is what they should be thinking about during implementation.

LATEST FROM DR GLOBAL

Israeli Oil Refinery Taken Offline by Pro-Iranian Attackers

The apparent pro-Iranian Cyber Avengers posted images of BAZAN Groups's SCADA systems, diagrams, and programmable logic controller (PLC) code.

How to Use Threat Intelligence to Mitigate Third-Party Risk