Dark Reading Daily -- August 03, 2023

Tesla Jailbreak Unlocks Theft of In-Car Paid Features

Want heated seats for free? Self-driving in Europe despite a regulatory ban? Researchers have discovered the road to free car-modding on the popular Tesla EVs.

Russian APT 'BlueCharlie' Swaps Infrastructure to Evade Detection

Despite being outed earlier this year, the advanced persistent threat group is trying to sneak past researchers again.

Iranian Company Plays Host to Reams of Ransomware, APT Groups

Cloudzy is a command-and-control provider (C2P) to APT groups in Iran, North Korea, and Russia, according to Halcyon.

Instagram Flags AI-Generated Content

Amid the national discussion about AI safety and non-human-originated content in the US, an app researcher spotted an effort by the social media app to flag AI posts for its 2+ billion users.

Hot Topic Apparel Brand Faces Credential-Stuffing Attack

Due to the nature of the attack, Hot Topic says that it was unable to tell which accounts were accessed by legitimate users and which were accessed by threat actors, making the situation all the more difficult.

Utilities Face Security Challenges as They Embrace Data in New Ways

A culture of cybersecurity and implementing industry best practices can go a long way toward protecting a utility.

Cyber-Insurance Underwriting Is Still Stuck in the Dark Ages

Innovations in continuous controls monitoring may be the only way underwriters can offer cyber-insurance policies that make sense in the market.

(Sponsored Article) How to Put the Sec in DevSecOps

Learn the importance of adding security practices into DevOps life cycles and how to make security stronger.

'DarkBERT' GPT-Based Malware Trains Up on the Entire Dark Web

The DarkBART and DarkBERT cybercriminal chatbots, based on Google Bard, represent a major leap ahead for adversarial AI, including Google Lens integration for images and instant access to the whole of the cyber-underground knowledge base.

Why the California Delete Act Matters

Bill 362 is a perfect template for a nationwide win against data brokers and the privacy infringements they cause.

CISA: 'Submarine' Backdoor Torpedoes Barracuda Email Security

A China-nexus cyber-espionage campaign rages on with the fourth backdoor to surface in the wild that takes advantage of the CVE-2023-2868 zero-day security bug — with severe threat of lateral movement, CISA warns.

Lessons Not Learned From Software Supply Chain Attacks

Businesses that develop business-, mission-, or safety-critical software must learn from previous victims of software supply chain attacks.

Apple Users Open to Remote Control via Tricky macOS Malware

The Hidden Virtual Network Computing (hVNC) malware infests Macs and silently executes complete takeovers, with no user permission needed. It also sports persistence through reboots.

LATEST FROM THE EDGE

CISOs Need Backing to Take Charge of Security

Unless the CEO and other C-suite executives defer to the CISO's decisions on cybersecurity, is the CISO really running things?

LATEST FROM DR TECHNOLOGY

What Implementing Biometrics for Authentication Looks Like

CISOs are incorporating biometrics as part of their multifactor authentication strategies. This is what they should be thinking about during implementation.

LATEST FROM DR GLOBAL

Iran's APT34 Hits UAE With Supply Chain Attack

The prolific APT, also known as OilRig and MuddyWater, was caught targeting an IT company's government clients in the region, with the aim of carrying out cyber espionage.

How to Use Threat Intelligence to Mitigate Third-Party Risk