Dark Reading Daily -- April 03, 2023

Vulkan Playbook Leak Exposes Russia's Plans for Worldwide Cyberwar

Russian intelligence services, together with a Moscow-based IT company, are planning worldwide hacking operations that will also enable attacks on critical infrastructure facilities.

Post-Quantum Satellite Protection Rockets Towards Reality

A successful multi-orbit cryptography test beamed quantum-agile data up to two different satellites and back down to Earth.

Pro-Islam 'Anonymous Sudan' Hacktivists Likely a Front for Russia's Killnet Operation

"Anonymous Sudan" has been claiming that its DDoS attacks are in retaliation for anti-Islamic activities, but at least one security vendor is suspicious about its true motives.

BEC Fraudsters Expand to Snatch Real-World Goods in Commodities Twist

Business email compromise scams are moving beyond just stealing cash, with some threat actors fooling companies into sending goods and materials on credit, and then skipping out on payment.

US Space Force Requests $700M for Cybersecurity Blast Off

Russia's invasion of Ukraine spurs Space Force to seek astronomical investments in cybersecurity.

Is Decentralized Identity About to Reach an Inflection Point?

Decentralized identity products are increasingly projected to be introduced to the market in the next couple of years.

What CISOs Can Do to Build Trust & Fight Fraud in the Metaverse

Until a degree of confidence is established, a platform's credibility can be eroded by scammers and unsuspecting gamers who fall victim to their attacks.

Automatic Updates Deliver Malicious 3CX 'Upgrades' to Enterprises

In a SolarWinds-like attack, compromised, digitally signed versions of 3CX DesktopApp are landing on user systems via the vendor's update mechanism.

Stop Blaming the End User for Security Risk

Don't count on securing end users for system security. Instead, focus on better securing the systems — make them closed by default and build with a security-first approach.

Google: Commercial Spyware Used by Governments Laden With Zero-Day Exploits

Google TAG researchers reveal two campaigns against iOS, Android, and Chrome users that demonstrate how the commercial surveillance market is thriving despite government-imposed limits.

BEC Fraudsters Expand to Snatch Real-World Goods in Commodities Twist

Business email compromise scams are moving beyond just stealing cash, with some threat actors fooling companies into sending goods and materials on credit, and then skipping out on payment.

LATEST FROM THE EDGE

Organizations Consider Self-Insurance to Manage Risk

Risk reassessment is shaking up the cybersecurity insurance market, leading some organizations to consider their options, including self-insurance.

LATEST FROM DR TECHNOLOGY

Adaptive Access Technologies Gaining Traction for Security, Agility

With companies pushing to adopt zero-trust frameworks, adaptive authentication and access — once languishing — looks finally ready to move out of the doldrums.

The 10 Most Impactful Types of Vulnerabilities for Enterprises Today