The incident is typical of the heightened threats organizations face during the holidays, when most companies reduce their security operations staff by around 50%.
| LATEST SECURITY NEWS & COMMENTARY | Ransomware Attack on Blue Yonder Hits Starbucks, Supermarkets The incident is typical of the heightened threats organizations face during the holidays, when most companies reduce their security operations staff by around 50%. Fancy Bear 'Nearest Neighbor' Attack Uses Nearby Wi-Fi Network In a "new class of attack," the Russian APT breached a target in Washington, DC, by credential-stuffing wireless networks in close proximity to it and daisy-chaining a vector together in a resourceful and creative way, according to researchers. Sneaky Skimmer Malware Targets Magento Sites Ahead of Black Friday A stealthy JavaScript injection attack steals data from the checkout page of sites, either by creating a fake credit card form or extracting data directly from payment fields. Faux ChatGPT, Claude API Packages Deliver JarkaStealer Attackers are betting that the hype around generative AI (GenAI) is attracting less technical, less cautious developers who might be more inclined to download an open source Python code package for free access, without vetting it or thinking twice. Chinese APT Gelsemium Deploys 'Wolfsbane' Linux Variant In a sign of the times, a backdoor malware whose ancestors date back to 2005 has morphed to target Linux systems. Salt Typhoon Builds Out Malware Arsenal With GhostSpider The APT, aka Earth Estries, is one of China's most effective threat actors, performing espionage for sometimes years on end against telcos, ISPs, and governments before being detected. BlackBasta Ransomware Brand Picks Up Where Conti Left Off New analysis says law enforcement efforts against Russian-language ransomware-as-a-service (RaaS) infrastructure helped consolidate influence behind BlackBasta, but some experts aren't so sure the brand means that much. Cybersecurity Is Critical, but Breaches Don't Have to Be Disasters The future of cybersecurity isn't about preventing every breach — it's about learning and growing stronger with each attack. My Car Knows My Secrets, and I'm (Mostly) OK With That Imagine your car gossiping to insurance companies about your lead foot, or data brokers peddling your daily coffee run. Welcome to the world of connected cars, where convenience and privacy are locked in a head-on collision. MORE NEWS / MORE COMMENTARY | | | PRODUCTS & RELEASES | CyberRatings.org Announces Test Results for Cloud Service Provider Native Firewalls CyCognito Report Highlights Rising Cybersecurity Risks in Holiday E-Commerce MORE PRODUCTS & RELEASES |
|
Dark Reading Weekly -- Published By Dark Reading Informa Tech Holdings LLC | Registered in the United States with number 7418737 | 605 Third Ave., 22nd Floor, New York, New York 10158, USA
| To opt-out of any future Dark Reading Weekly Newsletter emails, please respond here. | Thoughts about this newsletter? Give us feedback. |
Keep This Newsletter Out Of Your SPAM Folder Don't let future editions go missing. Take a moment to add the newsletter's address to your anti-spam white list: | If you're not sure how to do that, ask your administrator or ISP. Or check your anti-spam utility's documentation. | We take your privacy very seriously. Please review our Privacy Statement. |
|
|