While China is already among the world's most formidable threat actors, a focus on exploiting public-facing appliances makes its state-sponsored APTs more dangerous than ever.
| LATEST SECURITY NEWS & COMMENTARY | Zero-Days in Edge Devices Become China's Cyber Warfare Tactic of Choice While China is already among the world's most formidable threat actors, a focus on exploiting public-facing appliances makes its state-sponsored APTs more dangerous than ever. 21 Vulnerabilities Discovered in Crucial IT-OT Connective Routers In this Black Hat Europe preview, devices bridging critical machinery with the wider Internet are exposed and subject to numerous supply chain-induced bugs. Rackspace Ransomware Costs Soar to Nearly $12M Rackspace's 2022 ransomware attack costs only continue to mount, with lawsuits in the offing — and show the long-tail costs of a cyberattack. MOVEit Hackers Pivot to SysAid Zero-Day in Ransomware Attacks The Cl0p ransomware group is actively exploiting a SysAid zero-day flaw after running rampant through enterprise systems using MOVEit file transfer bug. 'CitrixBleed' Linked to Ransomware Hit on China's State-Owned Bank Meanwhile, CISA joins the call to patch CVE-2023-4966 immediately amid reports of mass-exploit activity; at least 5,000 orgs remain exposed. 'Hunters International' Cyberattackers Take Over Hive Ransomware Hunters International appears to have acquired Hive ransomware from its original operators and may be seeking to cash in on the malware's reputation. 'BlazeStealer' Python Malware Allows Complete Takeover of Developer Machines Checkmarx researchers warn that BlazeStealer can exfiltrate information, steal passwords, disable PCs, and take over webcams. There's Only One Way to Solve the Cybersecurity Skills Gap The cybersecurity skills gap is making businesses more vulnerable, but it won't be fixed by upskilling high-potential recruits alone. SEC Suit Ushers in New Era of Cyber Enforcement A federal push to enforce cybersecurity requirements is holding public companies and government contractors accountable as a matter of law and for national security. Steps CISOs Should Take Before, During & After a Cyberattack By creating a plan of action, organizations can better respond to attacks. MORE NEWS / MORE COMMENTARY | |
|
Dark Reading Weekly -- Published By Dark Reading Informa Tech Holdings LLC | Registered in the United States with number 7418737 | 605 Third Ave., 22nd Floor, New York, New York 10158, USA
| To opt-out of any future Dark Reading Weekly Newsletter emails, please respond here. | Thoughts about this newsletter? Give us feedback. |
Keep This Newsletter Out Of Your SPAM Folder Don't let future editions go missing. Take a moment to add the newsletter's address to your anti-spam white list: | If you're not sure how to do that, ask your administrator or ISP. Or check your anti-spam utility's documentation. | We take your privacy very seriously. Please review our Privacy Statement. |
|
|