Cyber

Hacking, breaches, security

Cyber

Close Identity Gaps in Software Development Before Unleashing AI

Artificial intelligence is complicating security in the software development life cycle, but a Dark Reading roundtable found collaboration, better identity visibility, and reduced testing costs offer CISOs a way ahead.

Source: Dark Reading
Cyber

Hackers Abuse AI Pen-Test Tool Cairn to Automate Massive Attack Spree

A Chinese-speaking attacker has compromised hundreds of websites across the globe, looting from big fish like John Deere, SharkNinja, and engine manufacturer Cummins.

Source: Dark Reading
Cyber

Researchers Infiltrate Microsoft Tech Support Scam Operation

A large-scale scam operation impersonating Microsoft uses a malicious traffic distribution system (TDS) run by a Russian organization and abuses thousands of Cloudflare links.

Source: Dark Reading
Cyber

'AdFection' Turns Ad Impressions Into Zero-Click Spyware Delivery

Spyware vendors are exploiting targeted ad bidding in the digital ecosystem to identify and track individuals and organizations of interest.

Source: Dark Reading
Cyber

ConnectWise Disables Cloud Backups Amid Concerns for Downstream MSPs

Researchers say attackers authenticated into Microsoft 365 tenants using ConnectWise credentials; ConnectWise says customer impact remains unconfirmed.

Source: Dark Reading
Cyber

OnlyFans Copyright Takedowns Expose Compromised Websites

Copyright takedown requests tied to OnlyFans and other adult content creators are revealing how attackers exploit vulnerable university and government websites to manipulate search results.

Source: Dark Reading
Cyber

The Evolving Cybersecurity Lexicon: Vulnerability Discovery to Resilience

An industry-wide, laser focus on vulnerabilities has left cybersecurity teams without enough room to strategize for resilience.

Source: Dark Reading
Cyber

BeyondTrust Remote Support Zero-Day Continues Trend of Exploited Edge Bugs

Ivanti, Cisco, and Palo Alto Networks all had vulnerabilities in edge devices come under fire this week. Now BeyondTrust joins the group.

Source: Dark Reading
Cyber

Fake Claude, ChatGPT Attacks Surge, Putting Developers at Risk

Campaigns that impersonate popular AI brands are on the rise, and they typically use ClickFix-like tactics to target unsuspecting enterprise employees.

Source: Dark Reading
Cyber

Biomemory Launches DNA Shield, First Commercial Product Built on Its Molecular IT Platform

The launch follows the acquisition of catalog's assets and the appointment of Laurent Guengant as CEO earlier this year.

Source: Dark Reading
Cyber

Enterprise AI Enters Risk Management Phase as Security Concerns Rise

Companies are increasingly discovering that the challenge with AI is no longer adoption, but execution.

Source: Dark Reading
Cyber

AI Takes Control of Robotic Arm in 16 Minutes Flat

Most OT devices at utilities, factories, and elsewhere have been deployed for a decade or more, but operators need to get agile and deploy new cyber defenses.

Source: Dark Reading