Dark Reading Daily -- August 15, 2023

What's New in the NIST Cybersecurity Framework 2.0

Update to the NIST framework adds new "govern" function for cybersecurity.

Following Pushback, Zoom Says It Won't Use Customer Data to Train AI Models

Company's experience highlights the tightrope tech organizations walk when integrating AI into their products and services.

Phishing Operators Make Ready Use of Abandoned Websites for Bait

Abandoned sites — like Wordpress — are easy to break into, offer a legitimate looking cover, and can remain active for longer than average.

Health Data of 4M Stolen in Cl0p MOVEit Breach of Colorado Department

State's Department of Health Care Policy & Financing is the latest to acknowledge an attack by the Russian group's ongoing exploitation of third-party systems.

5 Ways CISA Can Help Cyber-Poor Small Businesses & Local Governments

Adopting these recommendations will help SMBs and public-sector agencies that must deal with the same questions of network security and data safety as their larger cousins, but without the same resources.

Interpol Shuts Down Phishing Service '16shops'

Global law enforcement operation leads to arrests of suspects behind sale of popular phishing kits.

(Sponsored Article) Healthcare Innovation: A Safe and Secure Approach

Six focus areas to address the top security challenges facing healthcare organizations today.

Microsoft Patches Zero-Day Bug Under Active Exploit in August Update

Attackers are already exploiting one of Microsoft's August Patch Tuesday fixes in the wild, which offers up a low attack complexity for cyberattackers.

NSA: Codebreaker Challenge Helps Drive Cybersecurity Education

The US National Security Agency aims to attract students to cybersecurity in general and its own open positions in particular: 3,000 new jobs this year.

What CISA and NSA Guidance Means for Critical Infrastructure Security

Strategically investing in solutions that meet you where you are makes all the difference in staying secure from cyber threats.

10 Key Controls to Show Your Organization Is Worthy of Cyber Insurance

More-effective cyber-risk management controls can help bolster a company's policy worthiness. Start with these 10 tips to manage risk as underwriter requirements get more sophisticated.

XWorm, Remcos RAT Evade EDRs to Infect Critical Infrastructure

Disguised as harmless PDF documents, LNK files trigger a PowerShell script, initiating a Rust-based injector called Freeze[.]rs and a host of malware infections.

LATEST FROM THE EDGE

7 Reasons People Don't Understand What You Tell Them

No matter how clearly security professionals express themselves, not everyone thinks the same way. Here's why communication can go wrong.

LATEST FROM DR TECHNOLOGY

Lock Down APIs to Prevent Breaches

Developers need to focus on creating secure web and mobile applications, because flaws in Web application programming interfaces (APIs) have left companies open to attack.

LATEST FROM DR GLOBAL

Russian-African Security Gathering Exposes Kremlin's Reduced Influence

Messaging from joint summit in Saint Petersburg amounts to little more than "diplomatic subterfuge," observers note.

How Supply Chain Attacks Work, and How to Stop Them