Dark Reading Daily -- August 14, 2023

XWorm, Remcos RAT Evade EDRs to Infect Critical Infrastructure

Disguised as harmless PDF documents, LNK files trigger a PowerShell script, initiating a Rust-based injector called Freeze[.]rs and a host of malware infections.

Security Pressures Mount Around AI's Promises & Peril

Both threats to enterprises and career opportunities are being created by the escalation of generative AI and ChatGPT, warns Maria 'Azeria' Markstedter.

As Phishing Gets Even Sneakier, Browser Security Needs to Step Up

Perception Point's Din Serussi says browser extensions can help mitigate more sophisticated phishing techniques.

Threat Intelligence Efforts, Investment Lagging, Says Opswat

In an annual survey, 62% of respondents admited their threat intel efforts need stepping up.

Rhysida Ransomware Trains Its Sights on Healthcare Operations

The new group has already made an impact in multiple countries and industries, including a multistate hospital chain in the US.

What CISA and NSA Guidance Means for Critical Infrastructure Security

Strategically investing in solutions that meet you where you are makes all the difference in staying secure from cyber threats.

Disposed-of Gadgets Can Lead to Wi-Fi Network Hacks, Kaspersky Says

Wi-Fi settings are easily stolen when old gadgets are gotten rid of, which puts end users in the crosshairs for network attacks.

Major Police Breach Endangers Safety of Officers & Civilians

A mistake snowballs into a serious political issue as the safety of police officers in Northern Ireland is compromised in an accidental data leak.

EvilProxy Cyberattack Flood Targets Execs via Microsoft 365

A campaign sent 120,000 phishing emails in three months, circumventing MFA to compromise cloud accounts of high-level executives at global organizations

CISA: 'Whirlpool' Backdoor Sends Barracuda ESG Security Down the Drain

Researchers have observed China's UNC4841 dropping the backdoor on Barracuda's email security appliances, in a spiraling cyber-espionage campaign.

Cybersecurity: It's Time to Trust the Machines

When it comes to cybersecurity automation, the pluses outweigh the minuses.

Navigating Cybersecurity's Seas: Environmental Regulations, OT & the Maritime Industry's New Challenges

Stringent efficiency measures in new environmental regulations create an unintended consequence for the shipping industry: increased cybersecurity risks in operational technology systems.

Dell Credentials Bug Opens VMware Environments to Takeover

Decoding private keys from even one Dell customer could give attackers control over VMware environments across all organizations running the same programs.

LATEST FROM THE EDGE

What's in New York's 'First-Ever' Cyber Strategy?

Governor Kathy Hochul has made cybersecurity a key priority, with New York's first chief cyber officer, Colin Ahern, leading the effort.

LATEST FROM DR TECHNOLOGY

New LLM Tool Seeks and Remediates Vulnerabilities

Vicarius launches vuln_GPT, which it says will generate and execute scripts to ameliorate flaws such as the TETRA backdoor.

LATEST FROM DR GLOBAL

Raft of TETRA Zero-Day Vulnerabilities Endanger Industrial Communications

Further TETRA-related vulnerabilities have been disclosed in base stations that run and decrypt the worldwide communications protocol for industrial systems.

The Secrets of Successful SecOps Data Analytics