Dark Reading Daily -- July 14, 2023

WormGPT Cybercrime Tool Heralds an Era of AI Malware vs. AI Defenses

A black-hat alternative to GPT models specifically designed for malicious activities like BEC, malware, and phishing attacks is here, and will push organizations to level up with generative AI themselves.

SolarWinds Attackers Dangle BMWs to Spy on Diplomats

Cloaked Ursa/Nobelium gets creative by appealing to the more personal needs of government employees on foreign missions in Kyiv.

Killnet Tries Building Russian Hacktivist Clout With Media Stunts

Killnet has been more effective at generating headlines than in executing attacks or wreaking any real damage, experts say.

Critical RCE Bug in Rockwell Automation PLCs Zaps Industrial Sites

Rockwell Automation and CISA warn of security vulnerabilities that affect power plants, factories, and other critical infrastructure sites.

Orca Sues Wiz for 'Copying' Its Cloud Security Tech

Two fierce cloud security competitors are locked in a legal battle, as Orca accuses Wiz of ripping off its intellectual property.

Creating a Patch Management Playbook: 6 Key Questions

The vulnerability gap continues to persist, and IT and security teams can play a major role in reducing their attack surface.

Okta, Ping Identity, CyberArk & Oracle Lead the IDaaS Omdia Universe

Omdia has published its Omdia Universe on IDaaS. This vendor comparison study highlights the capabilities of the vendors in the space.

(Sponsored Article) How to Use Log Management to Retrace Your Digital Footsteps

Log management tools help IT and security teams monitor and improve a system's performance by identifying bugs, cybersecurity breaches, and other issues that can create outages or compliance problems.

Hackers Exploit Policy Loophole in Windows Kernel Drivers

Using open source tools, attackers target Chinese speakers with malicious drivers with expired certificates, potentially allowing for full system takeover.

Microsoft Discloses 5 Zero-Days in Voluminous July Security Update

Fixes for more than 100 vulnerabilities affect numerous products, including Windows, Office, .Net, and Azure Active Directory, among others.

How to Put Generative AI to Work in Your Security Operations Center

Generative AI is the cybersecurity resource that never sleeps. Here are some of the ways security-focused generative AI can benefit different members of the SOC team.

Chinese APT Cracks Microsoft Outlook Emails at 25 Government Agencies

Foreign state-sponsored actors likely had access to privileged state emails for weeks, thanks to a token validation vulnerability.

LATEST FROM DR TECHNOLOGY

Decoding Identity and Access Management for Organizations and Consumers

Workforce IAM and consumer IAM are not interchangeable — they serve different purposes and constituencies.

LATEST FROM THE EDGE

How the EU AI Act Will Affect Businesses, Cybersecurity

The draft AI Act represents a significant step in regulating AI technologies, recognizing the need to address the potential risks and ethical concerns.

LATEST FROM DR GLOBAL

African Nations Face Escalating Phishing & Compromised Password Cyberattacks

Cyberattacks against organizations in some African nations increased significantly in 2022, despite a major expansion in cybersecurity hiring to support cloud and digital migration.

How to Use Threat Intelligence to Mitigate Third-Party Risk