Dark Reading

New Phishing Campaign Targets Individuals of Interest to Iran

07/13/2021
TA453 group spoofed two scholars at University of London to try and gain access to email inboxes belonging to journalists, think tank personnel, academics, and others, security vendor says.

Microsoft Patches 3 Windows Zero-Days Amid 117 CVEs

07/13/2021
The July Patch Tuesday release also includes the out-of-band fix for the Windows Print Spooler remote code execution flaw under attack.

DoD-Validated Data Security Startup Emerges From Stealth

07/13/2021
The Code-X platform has been tested by the US Department of Defense and members of the intelligence community.

Why We Need to Raise the Red Flag Against FragAttacks

07/13/2021
Proliferation of wireless devices increases the risk that corporate networks will be attacked with this newly discovered breed of Wi-Fi-based cyber assault.

Enterprises Altering Their Supply Chain Defenses on Heels of Latest Breaches

07/13/2021
More than half of enterprises surveyed for Dark Reading's State of Malware Threats report indicate they are making at least a few changes to their supply chain security defenses following recent attacks on software vendors such as SolarWinds.

Can Government Effectively Help Businesses Fight Cybercrime?

07/13/2021
From the Biden administration's pledge to take action to INTERPOL's focus on ransomware as a global threat, governments are looking to help businesses cope with cyberattacks. But can it really work?

The Trouble With Automated Cybersecurity Defenses

07/13/2021
While there's enormous promise in AI-powered tools and machine learning, they are very much a double-edged sword.

Tool Sprawl & False Positives Hold Security Teams Back

07/13/2021
Security teams spend as much time addressing false positive alerts as they do addressing actual cyberattacks, survey data shows.

SolarWinds Discloses Zero-Day Under Active Attack

07/12/2021
The company confirms this is a new vulnerability that is not related to the supply chain attack discovered in December 2020.

Microsoft Confirms Acquisition of RiskIQ

07/12/2021
RiskIQ's technology helps businesses assess their security across the Microsoft cloud, Amazon Web Services, other clouds, and on-premises.

Kaseya Releases Security Patch as Companies Continue to Recover

07/12/2021
Estimates indicate the number of affected companies could grow, while Kaseya faces renewed scrutiny as former employees reportedly criticize its lack of focus on security.

Navigating Active Directory Security: Dangers and Defenses

07/12/2021
Microsoft Active Directory, ubiquitous across enterprises, has long been a primary target for attackers seeking network access and sensitive data.

How Dangerous Is Malware? New Report Finds It's Tough to Tell

07/09/2021
Determining which malware is most damaging, and worthy of immediate attention, has become difficult in environments filled with alerts and noise.

CISA Analysis Reveals Successful Attack Techniques of FY 2020

07/09/2021
The analysis shows potential attack paths and the most effective techniques for each tactic documented in CISA's Risk and Vulnerability Assessments.

New Framework Aims to Describe & Address Complex Social Engineering Attacks

07/09/2021
As attackers use more synthetic media in social engineering campaigns, a new framework is built to describe threats and provide countermeasures.

I Smell a RAT! New Cybersecurity Threats for the Crypto Industry

07/09/2021
The ElectroRAT Trojan attacker's success highlights the increasingly sophisticated nature of threats to cryptocurrency exchanges, wallets, brokerages, investing, and other services.

It's in the Game (but It Shouldn't Be)

07/09/2021
Five ways that game developers (and others) can avoid falling victim to an attack like the one that hit EA.

Morgan Stanley Discloses Data Breach

07/08/2021
Attackers were able to compromise customers' personal data by targeting the Accellion FTA server of a third-party vendor.

New WildPressure Malware Capable of Targeting Windows and MacOS

07/08/2021
The Trojan sends information back to the attackers' servers about the programming language of a target device.

Kaseya Hacked via Authentication Bypass

07/08/2021
The Kaseya ransomware attack is believed to have been down to an authentication bypass. Yes, ransomware needs to be on your radar -- but good authentication practices are also imperative.