Dark Reading Daily -- May 25, 2023

'Volt Typhoon' Breaks Fresh Ground for China-Backed Cyber Campaigns

This is the first incident where a threat actor from the country appears to be laying the groundwork for disruptive attacks in the future, researchers say.

CosmicEnergy Malware Emerges, Capable of Electric Grid Shutdown

Russian code that could tamper with industrial machines and toggle RTUs on and off was floating around VirusTotal for years before being noticed. It raises new questions about the state of OT security.

CISO Criminalization, Vague Cyber Disclosure Rules Create Angst for Security Teams

In the wake of the ex-Uber CISO verdict, CISOs ask for clearer rules and less uncertainty in managing disclosures, amid jail-time fears.

Google Cloud Bug Allows Server Takeover From CloudSQL Service

Researchers could access sensitive data and steal secrets by exploiting a vulnerability in GCP's security layer, eventually running rampant in the environment.

'Operation Magalenha' Attacks Give a Window Into Brazil's Cybercrime Ecosystem

A campaign against customers of Portuguese banks uses a capable financial malware strain dubbed PeepingTitle, written in the Delphi programming language.

Dangerous Regions: Isolating Branch Offices in High-Risk Countries

Organizations must be cautious about how they interact with other regions around the world in order to operate safely in an at-times adversarial landscape.

Lazarus Group Striking Vulnerable Windows IIS Web Servers

The infamous North Korean APT group is using Log4Shell, the 3CX supply chain attack, and other known vectors to breach Microsoft Web servers.

Netflix's Password-Sharing Ban Offers Security Upsides

The streaming giant is looking to bolster flagging subscription growth and profits, but security researchers say the move offers a perfect opportunity to encourage better password hygiene and account safety.

Google's .zip, .mov Domains Give Social Engineers a Shiny New Tool

Security professionals warn that Google's new top-level domains, .zip and .mov, pose social engineering risks while providing little reason for their existence.

5 Questions to Ask When Evaluating a New Cybersecurity Technology

Any new cybersecurity technology should be not just a neutral addition to a security stack but a benefit to the other technologies or people managing them.

How Universities Can Bridge Cybersecurity's Gender Gap

It's time to invest in initiatives that engage young women in cybersecurity early and often.

'Volt Typhoon' China-Backed APT Infiltrates US Critical Infrastructure Orgs

According to Microsoft and researchers, the state-sponsored threat actor could very well be setting up a contingency plan for disruptive attacks on the US in the wake of an armed conflict in the South China Sea.

LATEST FROM DR GLOBAL

Bank of Ghana Opens SOC to Enable Threat Intelligence Sharing

Bank of Ghana's security operations center will boost visibility into threats and enable threat intelligence sharing, it says.

LATEST FROM THE EDGE

Russia's War in Ukraine Shows Cyberattacks Can Be War Crimes

Ukraine head of cybersecurity Victor Zhora says the world needs "efficient legal instruments to confront cyber terrorism."

LATEST FROM DR TECHNOLOGY

Red Hat Tackles Software Supply Chain Security

The new Red Hat Trusted Software Supply Chain services help developers take a secure-by-design approach to build, deploy, and monitor software.

Securing the Remote Worker: How to Mitigate Off-Site Cyberattacks