'Silver Fox' APT Skirts Windows Blocklist in BYOVD Attack

There's an untapped universe of exploitable drivers in the wild today. By exploiting just one of them, attackers were able to defeat security tools and infect Asian citizens with Gh0stRAT.

Feb. 27, 2025 Signup

Daily Edition

Today’s news and insights for cybersecurity professionals

- Today's News and Features -

TOP STORY

'Silver Fox' APT Skirts Windows Blocklist in BYOVD Attack‎ There's an untapped universe of exploitable drivers in the wild today. By exploiting just one of them, attackers were able to defeat security tools and infect Asian citizens with Gh0stRAT.‎‎ Keep Reading →

Stealthy Linux 'Auto-color' Backdoor Paints US Institutions With Malware‎‎ Attackers are using a novel malware that takes on different file names each time it's deployed; it also boasts an anti-removal mechanism to target universities and government offices.‎‎

Anubis Threat Group Seeks Out Critical Industry Victims‎‎ The threat group has a variety of tactics in its toolbox, including double extortion and ransomware-as-a-service.‎‎

Water Utility Co. Still Paying the Breach Price a Year Later‎‎ The UK's Southern Water has been forced to shell out millions due to a Black Basta cyberattack, and it has come to light that the total could include a ransom payment.‎‎

DR TECHNOLOGY

Fortanix Tackles Quantum Computing Threats With New Algorithms‎ Fortanix is implementing post-quantum cryptographic algorithms in its security suite to protect against future attacks.‎

THE EDGE

Betting (and Losing) the Farm on Traditional Cybersecurity‎ Standard SecOps training is no longer enough to tackle modern cybersecurity challenges. People need to develop nontraditional skills.‎

SPONSORED ARTICLE

Automating Pen Testing Strengthens Cybersecurity‎‎ Automated pen testing helps businesses stay ahead of cyber threats by identifying vulnerabilities before attackers do.‎‎

Read More →

- Commentary -

Opinions from thought leaders around the cybersecurity industry

Machine Unlearning: The Lobotomization of LLMs‎ In the end, the question isn't whether large language models will ever forget — it's how we'll develop the tools and systems to do so effectively and ethically.‎‎

Name That Toon: Ka-Ching!‎ Feeling creative? Have something to say about cybersecurity? Submit your caption and our panel of experts will reward the winner with a $25 gift card.‎‎

More Commentary →

- Upcoming Events -

Mar 19, 2025 DR, SIEM, SOAR, and MORE: How to Determine the Right Endpoint Strategy for Your Enterprise

Feb 27, 2025 Where Does Outsourcing Make Sense for Your Organization?

Mar 20, 2025 [Dark Reading Virtual Event] Cybersecurity's Most Promising New and Emerging Technologies

More Events →

- More Resources -

WHITE PAPER Frost Radar: Cloud Security Posture Management, 2024

WHITE PAPER The State of Firewall Security: Challenges, Risks, and Solutions for Modern Networks

WHITE PAPER Understanding Social Engineering Attacks and What To Do About Them

REPORT Building Blocks for Next-Gen Security Operations

More Resources →

- Elsewhere in Cyber Today -

CYBERSECURITY DIVE

Nearly 3K Ivanti Connect Secure Instances Vulnerable to Critical Flaw

SOCKET

Malicious PyPI Package Exploits Deezer API for Coordinated Music Piracy

HUNT.IO

LightSpy Expands Command List to Include Social Media Platforms

- Do You Find Today’s Newsletter Helpful? -

Yes Not sure No

You received this message because you are subscribed to Dark Reading's Daily newsletter. If a friend forwarded you this message, sign up here to get it in your inbox. Thoughts about this newsletter? Give us feedback.

Advertise With Us | Privacy Policy | Unsubscribe Copyright © 2025 TechTarget, Inc. or its subsidiaries. All rights reserved. Operated by TechTarget, Inc. and its subsidiaries, 275 Grove Street, Newton, Massachusetts, 02466 US