Cloud services and thus millions of end users who access them could have been affected by the poisoning of artifacts in the development workflow of open source projects.
| LATEST SECURITY NEWS & COMMENTARY | GitHub Attack Vector Cracks Open Google, Microsoft, AWS Projects Cloud services and thus millions of end users who access them could have been affected by the poisoning of artifacts in the development workflow of open source projects. 'EastWind' Cyber-Spy Campaign Combines Various Chinese APT Tools The likely China-linked campaign is deploying CloudSorcerer and other proprietary binaries belonging to known state-sponsored groups, showing how advanced persistent threat groups often collaborate with each other. UK Royal Family, Prime Minister Deepfakes Make Rounds on Meta According to the researchers, roughly 250 fake advertisements appeared on platforms like Facebook and Instagram, and some are reportedly still up and running. Cybercriminal Leader 'J.P.Morgan' Busted for Pioneering RaaS Model Maksim Silnikau and his associates are accused of developing and distributing notorious ransomware strains such as Reveton and Ransom Cartel, among other criminal acts. Cybersecurity's Real Challenge Is Communication, Not Just Technology By nurturing a security-centric work culture that involves everybody, organizations can overcome challenges with greater agility and confidence. MORE NEWS / MORE COMMENTARY | | | | HOT TOPICS | Inc Ransomware Encryptor Contains Keys to Victim Data Recovery The threat group is disrupting healthcare organizations. Victims can help themselves, though, even after compromise, by being careful in the decryption process. DNC Credentials Compromised by 'IntelFetch' Telegram Bot The Democratic National Convention soon to take place in Chicago, already under heavy security, faces an additional threat in the form of stolen credentials for delegates. A Lesson From the CrowdStrike Incident The recent outage highlights the critical importance of adhering to established processes and governance frameworks. DARPA Aims to Ditch C Code, Move to Rust The Defense Advanced Research Projects Agency launches TRACTOR program to work with university and industry researchers on creating a translation system that can turn C code into secure, idiomatic Rust code. The Changing Expectations for Developers in an AI-Coding Future AI's proficiency at creating software code won't put developers out of a job, but the job will change to one focused on security, collaboration, and "mentoring" AI models. MORE |
| | PRODUCTS & RELEASES | Experian Acquires Behavioral Analytics Company NeuroID Digital Align Inc. Achieves SOC 2 Type 2 Certification for Secure Automation Intelligence Zimperium Teams Up With Okta to Enhance Zero-Trust Identity Threat Protection With AI-Driven Mobile Security Solutions MORE PRODUCTS & RELEASES |
|
Dark Reading Daily -- Published By Dark Reading Informa Tech Holdings LLC | Registered in the United States with number 7418737 | 605 Third Ave., 22nd Floor, New York, New York 10158, USA
| To opt-out of any future Dark Reading Daily Newsletter emails, please respond here. | Thoughts about this newsletter? Give us feedback. |
Keep This Newsletter Out Of Your SPAM Folder Don't let future editions go missing. Take a moment to add the newsletter's address to your anti-spam white list: | If you're not sure how to do that, ask your administrator or ISP. Or check your anti-spam utility's documentation. | We take your privacy very seriously. Please review our Privacy Statement. |
|
|