Dark Reading Daily -- November 22, 2022

Luna Moth's Novel, Malware-Free Extortion Campaign Takes Flight

Luna Moth is relying solely on call-back phishing, as well as legitimate tools, to steal data and extract ransoms from victims of all stripes in an expanding cyberattack effort.

Microsoft Warns of Rise in Stolen Cloud Tokens Used to Bypass MFA

Analysts see an uptick in token theft from authenticated users, allowing threat actors to bypass MFA protections.

Investors Are Pouring Cash Into These 10 Cybersecurity Startups

Following the dollars reveals pen-test and intrusion-detection startups are the most attractive to investors right now, collectively getting more than $3 billion in funding.

Better Together: Why It's Time for Ops and Security to Converge

Threat actors are becoming only more sophisticated and determined.

Name That Toon: Fall Cleanup

Feeling creative? Submit your caption and our panel of experts will reward the winner with a $25 Amazon gift card.

(Sponsored Article) The Future of Cybersecurity Recruiting: Lessons on What Employers Want and What Students Need

The cybersecurity industry is facing a challenge to find qualified candidates. Here’s what recruiters, educators, and employers can do to fill the talent gap.

DEV-0569 Ransomware Group Remarkably Innovative, Microsoft Cautions

Although the group relies on good old phishing to deliver Royal ransomware, researchers say DEV-0569 regularly uses new and creative discovery techniques to lure victims.

The Next Generation of Supply Chain Attacks Is Here to Stay

With the proliferation of interconnected third-party applications, new strategies are needed to close the security gap.

Instagram Impersonators Target Thousands, Slipping by Microsoft's Cybersecurity

The socially engineered campaign used a legitimate domain to send phishing emails to large swaths of university targets.

Time to Get Kids Hacking: Our 2022 Holiday Gift Guide

Check out our slideshow of 10 fun games and toys that teach programming principles, electronics, and engineering concepts to get kids ready to hack the planet.

LATEST FROM THE EDGE

Major Security Breach From Business Users' Low-Code Apps Could Come in 2023, Analysts Warn

Here's what that means about our current state as an industry, and why we should be happy about it.

LATEST FROM DR TECHNOLOGY

Google Releases YARA Rules to Disrupt Cobalt Strike Abuse

The popular pen-testing tool is often cracked and repurposed by threat actors. Google now has a plan to address that.

Creating an Effective Incident Response Plan