Dark Reading Daily -- October 09, 2023

LATEST SECURITY NEWS & COMMENTARY

Too Rich to Ransomware? MGM Brushes Off $100M in Losses

MGM wins big bet that choosing days of operations outages is a better business decision than paying a ransom, following last month's data breach.

23andMe Cyberbreach Exposes DNA Data, Potential Family Ties

The information leaked in the breach involves personally identifiable information as well as genetic ancestry data, potential relatives, and geolocations.

Suspected Crime Gang Hacks Israeli President's Telegram Account

The encrypted messaging app was hacked in the wake of an online scam before access was "swiftly restored."

Preparing for the Unexpected: A Proactive Approach to Operational Resilience

Try these steps to create an operational resilience action plan that will satisfy financial regulators and help sustain business without disruption.

MORE NEWS / MORE COMMENTARY


HOT TOPICS
'Looney Tunables' Bug Opens Millions of Linux Systems to Root Takeover The flaw poses a significant risk of unauthorized data access, system alterations, potential data theft, and complete takeover of vulnerable systems, especially in the IoT and embedded computing space. Breaches Are the Cost of Doing Business, but NIST Is Here to Help Treating the NIST Cybersecurity Framework as a business requirement is a strong step toward preventing breaches. Could Cybersecurity Breaches Become Harmless in the Future? With these five steps, organizations can develop stronger security practices and make the inevitable breaches inconsequential. Legions of Critical Infrastructure Devices Subject to Cyber Targeting Nearly 100,000 ICS devices have been found open to the public Internet, potentially threatening physical safety globally. Here's how to quantify the risk. MORE

EDITORS' CHOICE

Critical Zero-Day Bug in Atlassian Confluence Under Active Exploit

Patch now: The Atlassian security vulnerability appears to be a remotely exploitable privilege-escalation bug that cyberattackers could use to crack collaboration environments wide open.

LATEST FROM THE EDGE

In Search of Rust Developers, Companies Turn to In-House Training

Google, Fortanix, and other firms have aimed to train a cadre of Rust developers, betting that the additional cost will be offset by security savings.

LATEST FROM DR TECHNOLOGY

Google, Yahoo Push DMARC, Forcing Companies to Catch Up

The move means that DMARC, already in use by half of enterprises, will become table stakes for anyone using email for marketing.

LATEST FROM DR GLOBAL

Madagascar Drops Predator Spyware on Citizens in Watering Hole Attack

The Predator spyware was distributed by dropping malicious links inside typosquatted facsimiles of news websites.

WEBINARS

DevSecOps for Mobile App Development
Baking security into applications earlier in the software development lifecycle has become the mantra of the enterprise today, with software development and security teams working closely together to ensure more secure coding throughout the development process to ensure safer and ...
Using AI in Application Security Tooling
As AI continues to improve, security vendors are considering how they can use AI to protect applications. In web application and API security tooling used to protect production environments, AI/ML can be used to enhance and complement existing tactics ...

View More Dark Reading Webinars >>

WHITE PAPERS

View More White Papers >>

How to Deploy Zero Trust for Remote Workforce Security