DarkReading Daily

June 5, 2025

Signup

Daily Edition

Today’s news and insights for cybersecurity professionals

- Today's News and Features -

TOP STORY

Vishing Crew Targets Salesforce Data‎‎‎

A group Google is tracking as UNC6040 has been tricking users into installing a malicious version of a Salesforce app to gain access to and steal data from the platform.‎‎‎

Keep Reading →

Attackers Impersonate Ruby Packages to Steal Sensitive Telegram Data‎‎‎

Malicious RubyGems pose as a legitimate plug-in for the popular Fastlane rapid development platform in a geopolitically motivated attack with global supply chain reach.‎‎‎

Researchers Bypass Deepfake Detection With Replay Attacks‎‎‎

An international group of researchers found that simply rerecording deepfake audio with natural acoustics in the background allows it to bypass detection models at a higher-than-expected rate.‎‎‎

35K Solar Devices Vulnerable to Potential Hijacking‎‎‎

A little more than three-quarters of these exposed devices are located in Europe, followed by Asia, with 17%.‎‎‎

DR GLOBAL

Iranian APT 'BladedFeline' Hides in Network for 8 Years‎

ESET published research on the Iranian APT "BladedFeline," which researchers believe is a subgroup of the cyber-espionage entity APT34.‎

DR GLOBAL

Cybersecurity Training in Africa Aims to Bolster Professionals' Ranks‎

The United Nations, Carnegie Mellon University, and private organizations are all aiming to train the next generation of cybersecurity experts, boost economies, and disrupt pipelines to armed groups.‎

THE EDGE

How to Approach Security in the Era of AI Agents‎

Organizations need to implement these five essential security controls to safely harness the power of autonomous AI agents while still protecting enterprise assets.‎

DR TECHNOLOGY

From Code Red to Rust: Microsoft's Security Journey‎

At this year's Build developer conference, Microsoft reflected on what the company learned about securing features and writing secure code in the early 2000s.‎

VIRTUAL EVENT

Strategic Security for the Modern Enterprise

Zero trust and secure access service edge (SASE) approaches to securing networks are all the rage, so how do you harness them to fortify your environment? In this virtual event on June 26, we’ll explore these security strategies as well as next-generation threat detection that employs valuable data analytics.

SPONSORED ARTICLE

Emphasize Security, Compliance in Cloud Migrations‎‎‎

Failing to consider security and compliance when migrating to the cloud may increase your risk of falling victim to a data breach.‎‎‎

- Commentary -

Opinions from thought leaders around the cybersecurity industry

How Neuroscience Can Help Us Battle 'Alert Fatigue'‎‎‎

By understanding the neurological realities of human attention, organizations can build more sustainable security operations that protect not only their digital assets but also the well-being of those who defend them.‎‎‎

Beware of Device Code Phishing‎‎‎

Hackers are exploiting trusted authentication flows — like Microsoft Teams and IoT logins — to trick users into handing over access tokens, bypassing MFA and slipping undetected into corporate networks.‎‎‎

More Commentary →