Announcements

How to Launch a Threat Hunting Program | Webinar <REGISTER>

How to Accelerate XDR Outcomes: Bridging the Gap Between Network and Endpoint | Webinar <REGISTER>

Black Hat USA 2022 Attendee Report | Supply Chain & Cloud Security Risks Are Top of Mind | <READ IT NOW>

Quick Hits

Tesla Whistleblower Leaks 100GB of Data, Revealing Safety Complaints

Informants have released data that includes thousands of safety complaints the company has received about its self-driving capability, as well as sensitive information regarding current and past employees.

Informants have released data that includes thousands of safety complaints the company has received about its self-driving capability, as well as sensitive information regarding current and past employees.

by Dark Reading Staff, Dark Reading

Lazarus Group Striking Vulnerable Windows IIS Web Servers

The infamous North Korean APT group is using Log4Shell, the 3CX supply chain attack, and other known vectors to breach Microsoft Web servers.

The infamous North Korean APT group is using Log4Shell, the 3CX supply chain attack, and other known vectors to breach Microsoft Web servers.

by Dark Reading Staff, Dark Reading

Netflix's Password-Sharing Ban Offers Security Upsides

The streaming giant is looking to bolster flagging subscription growth and profits, but security researchers say the move offers a perfect opportunity to encourage better password hygiene and account safety.

The streaming giant is looking to bolster flagging subscription growth and profits, but security researchers say the move offers a perfect opportunity to encourage better password hygiene and account safety.

by Tara Seals, Managing Editor, News, Dark Reading

Bank of Ghana Opens SOC to Enable Threat Intelligence Sharing

Bank of Ghana's security operations center will boost visibility into threats and enable threat intelligence sharing, it says.

Bank of Ghana's security operations center will boost visibility into threats and enable threat intelligence sharing, it says.

by Dark Reading Staff, Dark Reading

Threat Actors Compromise Barracuda Email Security Appliances

The company's ESG appliances were breached, but their other services remain unaffected by the compromise.

The company's ESG appliances were breached, but their other services remain unaffected by the compromise.

by Dark Reading Staff, Dark Reading

Israeli Shipping, Logistics Companies Targeted in Watering Hole Attacks

Researchers say the Iranian nation-state actor known as Tortoiseshell could be behind the attacks.

Researchers say the Iranian nation-state actor known as Tortoiseshell could be behind the attacks.

by Dan Raywood, Senior Editor, Dark Reading

FBI: Human Trafficking Rings Force Job Seekers Into Cryptojacking Schemes

Victims of the cybercrime schemes are coerced to participate through violence and having their belongings taken away.

Victims of the cybercrime schemes are coerced to participate through violence and having their belongings taken away.

by Dark Reading Staff, Dark Reading

Meta Hit With $1.3B Record-Breaking Fine for GDPR Violations

The technology conglomerate has until later this year to end its transfer of European user's data across the Atlantic.

The technology conglomerate has until later this year to end its transfer of European user's data across the Atlantic.

by Dark Reading Staff, Dark Reading

Apple Patches 3 Zero-Days Possibly Already Exploited

In an advisory released by the company, Apple revealed patches for three previously unknown bugs it says may already have been used by attackers.

In an advisory released by the company, Apple revealed patches for three previously unknown bugs it says may already have been used by attackers.

by Dark Reading Staff, Dark Reading

Google Debuts Quality Ratings for Security Bug Disclosures

New rules aim to level up the quality of submissions to Google and Android device Vulnerability Reward Program.

New rules aim to level up the quality of submissions to Google and Android device Vulnerability Reward Program.

by Becky Bracken, Editor, Dark Reading

BianLian Cybercrime Group Changes Up Extortion Methods, Warns CISA

CISA urges small and midsized organizations as well as critical infrastructure to implement mitigations immediately to shield themselves from further data exfiltration attacks.

CISA urges small and midsized organizations as well as critical infrastructure to implement mitigations immediately to shield themselves from further data exfiltration attacks.

by Dark Reading Staff, Dark Reading

Houthi-Backed Spyware Effort Targets Yemen Aid Workers

Pro-Houthi OilAlpha uses spoofed Android apps to monitor victims across the Arab peninsula working to bring stability to Yemen.

Pro-Houthi OilAlpha uses spoofed Android apps to monitor victims across the Arab peninsula working to bring stability to Yemen.

by Dark Reading Staff, Dark Reading

Apple Boots a Half-Million Developers From Official App Store

The mobile phone and MacBook giant also rejected nearly 1.7 million app submissions last year in an effort to root out malware and fraud.

The mobile phone and MacBook giant also rejected nearly 1.7 million app submissions last year in an effort to root out malware and fraud.

by Tara Seals, Managing Editor, News, Dark Reading

Russian Ransomware Perp Charged After High-Profile Hive, Babuk & LockBit Hits

LockBit, Babuk, and Hive ransomware used by Russian to target critical US organizations, DOJ says.

LockBit, Babuk, and Hive ransomware used by Russian to target critical US organizations, DOJ says.

by Dark Reading Staff, Dark Reading

Qilin Ransomware Operation Outfits Affiliates With Sleek, Turnkey Cyberattacks

Researchers infiltrate a ransomware operation and discover slick services behind Qilin's Rust-based malware variant.

Researchers infiltrate a ransomware operation and discover slick services behind Qilin's Rust-based malware variant.

by Dark Reading Staff, Dark Reading