Dark Reading Daily -- March 21, 2023

Unpatched Samsung Chipset Vulnerabilities Open Android Users to RCE Attacks

Users of affected devices that want to mitigate risk from the security issues in the Exynos chipsets can turn off Wi-Fi and Voice-over-LTE settings, researchers from Google's Project Zero say.

Mirai Hackers Use Golang to Create a Bigger, Badder DDoS Botnet

With HinataBot, malware authors have created a beast many times more efficient than even the scariest botnets of old, packing more than 3Tbit/s DDoS speeds.

ChatGPT Gut Check: Cybersecurity Threats Overhyped or Not?

UK cybersecurity authorities and researchers tamp down fears that ChatGPT will overwhelm current defenses, while the CEO of OpenAI worries about its use in cyberattacks.

Cops Nab BreachForums Boss in New York

The alleged mastermind of hacker forum BreachForums, "pompompurin," has been arrested in New York City, according to court documents.

Shouldering the Increasingly Heavy Cloud Shared-Responsibility Model

There are a number of solutions that can help ensure security and compliance mandates are met in the cloud, but organizations should prioritize integration and policy-based management.

Cyberattackers Hoop NBA Fan Data via Third-Party Vendor

The basketball playoffs are around the corner and convincing social-engineering attacks on fans using NBA-themed lures could be too.

(Sponsored Article) New Report: Inside the High Risk of Third-Party SaaS Apps

A new report from Adaptive Shield looks at the how volume of applications being connected to the SaaS stack and the risk they represent to company data.

Meta Proposes Revamped Approach to Online Kill Chain Frameworks

A more holistic model beyond MITRE et al. is needed to help defenders better identify and understand commonalities in different online threat campaigns, the Facebook parent company says.

The Ethics of Network and Security Monitoring

The chances of getting hacked are no longer low. Companies need to rethink their data collection and monitoring strategies to protect employee privacy and corporate integrity.

BianLian Ransomware Pivots From Encryption to Pure Data-Theft Extortion

The ransomware group has already claimed 116 victim organizations so far on its site, and it continues to mature as a thriving cybercriminal business, researchers said.

Microsoft Outlook Vulnerability Could Be 2023's 'It' Bug

Snowballing PoC exploits for CVE-2023-23397 and a massive attack surface means that almost any business user could be a victim.

LATEST FROM THE EDGE

AI Has Your Business Data

No-code has lowered the barrier for non-developers to create applications. AI will completely eliminate it.

LATEST FROM DR TECHNOLOGY

IAM Startup Aembit Secures How Workloads Connect to Services

Aembit launches from stealth with a cloud-based identity access management platform for enterprise workloads.

The 10 Most Impactful Types of Vulnerabilities for Enterprises Today