Industrial Controllers Still Vulnerable As Conflicts Move to Cyber – Dark Reading
The US government warns programmable logic controllers are being targeted, and research turns up 179 vulnerable operational technology (OT) devices. – Read More
Dark Reading
Russia’s ‘Fancy Bear’ APT Continues Its Global Onslaught – Dark Reading
Victims don’t need to match the cybercrime group’s technical sophistication, experts say. But patching and some form of zero trust are now non-negotiable. – Read More
‘BlueHammer’ Windows Zero-Day Exploit Signals Microsoft Bug Disclosure Issues – Dark Reading
Under the alias ‘Chaotic Eclipse,’ a researcher released a PoC exploit for a zero-day flaw that allows for system takeover by a local user, citing an undisclosed beef with Microsoft.…
Do Ceasefires Slow Cyberattacks? History Suggests Not – Dark Reading
The cybersecurity community is waiting with bated breath to see if Iranian hackers will honor a ceasefire that doesn’t actually name or directly involve them. – Read More
Can Anthropic Keep Its Exploit-Writing AI Out of the Wrong Hands? – Dark Reading
Its Mythos Preview model, which can allegedly find and exploit critical zero-days, also comes with certain controls, the vendor said. – Read More
Russia’s Forest Blizzard Nabs Rafts of Logins Via SOHO Routers – Dark Reading
Heard of fileless malware? How about malwareless cyber espionage? Russia’s APT28 is spying on global organizations by modifying just one DNS setting in vulnerable routers. – Read More
Threat Actors Get Crafty With Emojis to Escape Detection – Dark Reading
When 🤖 means “bot available,” 🧰 signifies “toolkit,” or 💰💰💰 translates to “big ransom,” bad actors can evade filters and keep it all on the down-low. – Read More
AI-Led Remediation Crisis Prompts HackerOne to Pause Bug Bounties – Dark Reading
Discovery used to be the bottleneck for open source bugs, but with automated discovery, remediation’s the bottleneck, which bounties don’t fund. – Read More
Fraud Rockets Higher in Mobile-First Latin America – Dark Reading
Cyber-fraudsters move quickly from compromised devices to account takeover to funds transfer, shifting money before many financial institutions can react. – Read More
Full Sail University to Open IBM Cyber Defense Range Powered by AWS and Cloud Range on Campus – Dark Reading
Post Content – Read More
Niobium Introduces The Fog – Dark Reading
Post Content – Read More
Pluralsight Launches SecureReady to Help Organizations Build Job-Ready Cybersecurity Teams – Dark Reading
Post Content – Read More
Iranian Threat Actors Disrupt US Critical Infrastructure Via Exposed PLCs – Dark Reading
Attackers compromised Internet-facing OT devices and caused file and display manipulation, operational disruption, and financial losses across sectors. – Read More
Storm-1175 Deploys Medusa Ransomware at ‘High Velocity’ – Dark Reading
Microsoft says the financially motivated cybercrime group has exploited N-day and zero-day vulnerabilities in campaigns predicated on speed. – Read More
Grafana Patches AI Bug That Could Have Leaked User Data – Dark Reading
By hiding malicious instructions on an attacker-controlled Web page, AI could ingest orders as benign and return sensitive data to the attacker’s server. – Read More