Dark Reading: Attacks/Breaches
LockBit Bigwig Arrested for Ransomware Crimes

A dual Russian-Canadian citizen is being extradited to the US to face charges related to LockBit ransomware activities.

Dark Reading: Attacks/Breaches
Managing and Mitigating Risk From Unknown Unknowns

Five practical steps to up-level attack surface management programs and gain greater visibility and risk mitigation around the extended ecosystem.

Dark Reading: Attacks/Breaches
Evasive KmsdBot Cryptominer/DDoS Bot Targets Gaming, Enterprises

KmsdBot takes advantage of SSH connections with weak login credentials to mine currency and deplete network resources, as it gains a foothold on enterprise systems.

Dark Reading: Attacks/Breaches
Amazon, Microsoft Cloud Leaks Highlight Lingering Misconfiguration Issues

Cloud storage databases, often deployed as "rogue servers" without the blessing of the IT department, continue to put companies and their sensitive data at risk.

Dark Reading: Attacks/Breaches
How to Close Kubernetes' Network Security Gap

StackRox bridges network security and other gaps and makes applying and managing network isolation and access controls easier while extending Kubernetes' automation and scalability benefit.

Dark Reading: Attacks/Breaches
Understanding the Rise of Risk-Based Vulnerability Management

Risk-based vulnerability management solutions foster the convergence of risk management and vulnerability management. Andrew Braunberg explains what’s driving the emergence of RBVM.

Dark Reading: Attacks/Breaches
Rezilion Expands Dynamic SBOM Capability to Support Windows Environments

Technology consolidates Windows and Linux software risk together in one UI, helping teams manage vulnerabilities and comply with new regulatory standards.

___________________________
@hacking_Attack
@Hacking_Video

Dark Reading: Attacks/Breaches
Flashpoint Releases Ransomware Prediction Model for Vulnerabilities

Links individual vulnerabilities to those known to have been used in ransomware operations, helping vulnerability management teams prevent potential cyber extortion events with VulnDB.

___________________________
@hacking_Attack
@Hacking_Video

Dark Reading: Attacks/Breaches
Malicious Python Package Relies on Steganography to Download Malware

The malicious package downloads an image from the Web, then uses a steganography module to extract and execute the code to download malware.

Dark Reading: Attacks/Breaches
Patch ASAP: Critical Citrix, VMware Bugs Threaten Remote Workspaces With Takeover

Hole-y software alert, Batman: Cybercriminal faves Citrix Gateway and VMware Workspace ONE have authentication-bypass bugs that could offer up total access to attackers.

Dark Reading: Attacks/Breaches
Lacework Extends CNAPP Capabilities With Attack Path Analysis and Agentless Workload Scanning

Greater insight into attack paths and runtime visibility helps customers reduce risk and improve cloud security posture.

___________________________
@hacking_Attack
@Hacking_Video

Dark Reading: Attacks/Breaches
How US Businesses Suffer From the Lack of Personal Data Privacy Laws

The stalling of federal legislation and the continued expansion of data brokers are fueling a phishing epidemic.

Dark Reading: Attacks/Breaches
Long Island Midterm Votes Delayed Due to Cyberattack Aftereffects

Suffolk County had to hand deliver voting databases with ballot results to the county election headquarters.

Dark Reading: Attacks/Breaches
Experian, T-Mobile Pay Up in Multimillion-Dollar Data Breach Settlements

Massachusetts Attorney General announced settlements across multiple states for damages from Experian's 2012 and 2015 breaches that violated consumer protection and notification laws.

Dark Reading: Attacks/Breaches
A Better Way to Resist Identity-Based Cyber Threats

New approaches to identity access management are indispensable.

Dark Reading: Attacks/Breaches
Cloud9 Malware Offers a Paradise of Cyberattack Methods

The Swiss Army knife-like browser extension is heaven for attackers — and can be hell for enterprise users.

Dark Reading: Attacks/Breaches
What We Really Mean When We Talk About ‘Cybersecurity’

A lack of precision in our terminology leads to misunderstandings and confusion about the activities we engage in, the information we share, and the expectations we hold.

Dark Reading: Attacks/Breaches
Compliancy Group Urges Healthcare Organizations to Complete Their HIPAA Security Risk Assessments

An annual HIPAA security risk assessment is required to meet HIPAA requirements.

___________________________
@hacking_Attack
@Hacking_Video

Dark Reading: Attacks/Breaches
Confidence in Data Recovery Tools Low

IT practitioners are developing ransomware response plans, but many of them are not confident in their data resiliency tools.

Dark Reading: Attacks/Breaches
Research Finds Less Than a Quarter of Organizations Fully Confident Ex-Employees No Longer Have Access to Company Infrastructure

Teleport releases its second annual State of Infrastructure Access and Security report.

___________________________
@hacking_Attack
@Hacking_Video

Dark Reading: Attacks/Breaches
Industrial Control Systems (ICS) Security Market Worth $23.7B by 2027, Report Says

The market growth is driven by the convergence of IT and OT systems. By region, North America is estimated to account for the largest market size during the forecast period.

___________________________
@hacking_Attack
@Hacking_Video