Dark Reading Daily -- March 30, 2023

Top Tech Talent Warns of AI's Threat to Human Existence in Open Letter

Elon Musk, Steve Wozniak, and Andrew Yang are among more than 1,000 tech leaders asking for time to establish human safety parameters around AI.

Trojan-Rigged Tor Browser Bundle Drops Malware

Attackers are targeting cryptocurrency accounts belonging to users in Russia and more than 50 other countries.

Patch Now: Cybercriminals Set Sights on Critical IBM File Transfer Bug

A vulnerability with a 9.8 CVSS rating in IBM's widely deployed Aspera Faspex offering is being actively exploited to compromise enterprises.

Google: Commercial Spyware Used by Governments Laden With Zero-Day Exploits

Google TAG researchers reveal two campaigns against iOS, Android, and Chrome users that demonstrate how the commercial surveillance market is thriving despite government-imposed limits.

Cybersecurity Investment Outlook Remains Grim as Funding Activity Sharply Declines

Security analysts expect little improvement until at least the second half of the year.

Phishing Emails Up a Whopping 569% in 2022

Credential phishing emails are the clear favorite of threat actors, with a 478% spike last year, new research shows.

Spera Takes Aim at Identity Security Posture Management

ISPM is a combination of identity attack surface management, and risk reduction, as well as identity threat prevention, detection, and response.

The CISO Mantra: Get Ready to Do More With Less

For the foreseeable future, with the spigots closing shut, CISOs will need to find ways to do more with less.

Using Observability to Power a Smarter Cybersecurity Strategy

With an infrastructure for observability, security teams can make better decisions about access and identity-based threats.

Hey, Siri: Hackers Can Control Smart Devices Using Inaudible Sounds

A technique, dubbed the "Near-Ultrasound Inaudible Trojan" (NUIT), allows an attacker to exploit smartphones and smart speakers over the Internet, using sounds undetectable by humans.

North Korea's Kimsuky Evolves into Full-Fledged, Prolific APT43

In cyberattacks against the US, South Korea, and Japan, the group (aka APT43 or Thallium) is using advanced social engineering and cryptomining tactics that set it apart from other threat actors.

Spend on Safety Measures & Call Out Insecure Practices for Safer IoT

IoT risk and security must get more attention from vendors and support from the marketplace.

Millions of Pen Tests Show Companies' Security Postures Are Getting Worse

A lack of website protections, Sender Policy Framework (SPF) records, and DNSSEC configurations leave companies open to phishing and data exfiltration attacks.

LATEST FROM THE EDGE

How Does Data Literacy Enhance Data Security?

With the rise in cloud-based security concerns and other issues, organizations must improve data literacy across the enterprise.

LATEST FROM DR TECHNOLOGY

Microsoft Security Copilot Uses GPT-4 to Beef Up Security Incident Response

Microsoft's new AI assistant tool helps cybersecurity teams investigate security incidents and hunt for threats.

The 10 Most Impactful Types of Vulnerabilities for Enterprises Today