Low-Drama ‘Dark Angels’ Reap Record Ransoms – Krebs on Security
A ransomware group called Dark Angels made headlines this past week when it was revealed the crime group recently received a record $75 million data ransom payment from a Fortune…
20K Ubiquiti IoT Cameras & Routers Are Sitting Ducks for Hackers – Dark Reading
In the cloud, patches disseminate automatically. On your computer, you get notified. IoT devices, meanwhile, can escape attention for years on end. – Read More
FTC Slams TikTok With Lawsuit After Continued COPPA Violations – Dark Reading
Though TikTok is expected to adhere to certain COPPA-outlined measures, the social media giant has failed to meet those expectations, the Feds allege. – Read More
Critical Apache OFBiz Vulnerability Allows Preauth RCE – Dark Reading
The enterprise resource planning platform bug CVE-2024-38856 has a vulnerability-severity score of 9.8 out of 10 on the CVSS scale and offers a wide avenue into enterprise applications for cyberattackers.…
China’s Evasive Panda Attacks ISP to Send Malicious Software Updates – Dark Reading
The APT used DNS poisoning to install the Macma backdoor on targeted networks and then deliver malware to steal data via post-exploitation activity. – Read More
Startup Spotlight: LeakSignal Helps Plug Leaky Data in Organizations – Dark Reading
Cybersecurity startup LeakSignal, a finalists in this year’s Black Hat USA Startup Spotlight competition, helps organizations see where data is leaking within their environment. – Read More
Startup Spotlight: Knostic Tackles AI’s Oversharing Problem – Dark Reading
Cybersecurity startup Knostic, a finalists in this year’s Black Hat USA Startup Spotlight competition, adds guardrails to how AI uses enterprise data to ensure sensitive data does not get leaked.…
Spotlight: Managing complex conveyancing cases without the admin – Legal Futures
Managing a large portfolio of properties can be time-consuming, costly, stressful, unruly and at times indifferent to deadlines. The post Spotlight: Managing complex conveyancing cases without the admin appeared first…
LITIG gen AI benchmarking meeting – Key takeaways – Legal IT Insider
The generative AI benchmarking meeting hosted by CMS’ chief innovation and knowledge officer John Craske on 1 August generated significant engagement, with some key takeaways to shape the next larger,…
Protect Data Differently for a Different World – Dark Reading
Adopting a military mindset toward cybersecurity means the industry moves beyond the current network protection strategies and toward a data-centric security approach. – Read More
Earning and learning – Law Gazette – Features
Solicitor apprenticeships have proved a good news story for the profession – widening access and expanding law’s talent pool. The challenge, Joanna Goodman reports, is to ensure numbers keep increasing.…
New Linux kernel cross-cache attack allows arbitrary memory writes – CSO Online
Researchers from the Graz University of Technology have discovered a way to convert a limited heap vulnerability in the Linux kernel into a malicious memory writes capability to demonstrate novel…
Researchers Uncover Flaws in Windows Smart App Control and SmartScreen – The Hacker News
Cybersecurity researchers have uncovered design weaknesses in Microsoft’s Windows Smart App Control and SmartScreen that could enable threat actors to gain initial access to target environments without raising any warnings.…
How Regional Regulations Shape Global Cybersecurity Culture – Dark Reading
Ultimately, a more cyber-secure world requires a global governing body to regulate and campaign for cybersecurity, with consistent regulatory requirements in the various regions around the world. – Read More
Kazakh Organizations Targeted by ‘Bloody Wolf’ Cyber Attacks – The Hacker News
Organizations in Kazakhstan are the target of a threat activity cluster dubbed Bloody Wolf that delivers a commodity malware called STRRAT (aka Strigoi Master). “The program selling for as little…