darkreading 1 year ago

Unprotected Session Tokens Can Undermine FIDO2 Security While the protocol has made passwordless authentication a reality, token-binding is key to prevent against token theft and reuse, security vendor says.

Dark Reading

Unprotected Session Tokens Can Undermine FIDO2 Security

While the protocol has made passwordless authentication a reality, token-binding is key to prevent against token theft and reuse, security vendor s...

darkreading 1 year ago

As the FBI Closes In, Scattered Spider Attacks Finance, Insurance Orgs Scattered Spider is as active as ever, despite authorities claiming that they're close to nailing its members.

Dark Reading

As the FBI Closes In, Scattered Spider Attacks Finance, Insurance Orgs

Scattered Spider is as active as ever, despite authorities claiming that they

darkreading 1 year ago

A Cost-Effective Encryption Strategy Starts With Key Management Key management is more complex than ever. Your choices are: Rely on your cloud provider or manage keys locally; Encrypt only the most critical data; Or encrypt everything.

Dark Reading

A Cost-Effective Encryption Strategy Starts With Key Management

Key management is more complex than ever. Your choices are to rely on your cloud provider or manage keys locally, encrypt only the most critical da...

darkreading 1 year ago

Dangerous Google Chrome Zero-Day Allows Sandbox Escape Exploit code is circulating for CVE-2024-4761, disclosed less than a week after a similar security vulnerability was disclosed as being used in the wild.

Dark Reading

Dangerous Google Chrome Zero-Day Allows Sandbox Escape

Exploit code is circulating for CVE-2024-4761, disclosed less than a week after a similar security vulnerability was disclosed as being used in the...

darkreading 1 year ago

DNS Tunneling Abuse Expands to Tracking & Scanning Victims Several campaigns are leveraging the evasive tactic to provide useful insights into victims' online activities and find new ways to compromise organizations.

Dark Reading

DNS Tunneling Abuse Expands to Tracking & Scanning Victims

Several campaigns are leveraging the evasive tactic to provide useful insights into victims

darkreading 1 year ago

There Is No Cyber Labor Shortage There are plenty of valuable candidates on the market. Hiring managers are simply looking in the wrong places.

Dark Reading

There Is No Cyber Labor Shortage

There are plenty of valuable candidates on the market. Hiring managers are simply looking in the wrong places.

darkreading 1 year ago

Heartbleed: When Is It Good to Name a Vulnerability? Ten years have passed since Heartbleed was first identified, but the security industry is still grappling with the question of branded vulnerabilities and naming vulnerabilities appropriately.

Dark Reading

Heartbleed: When Is It Good to Name a Vulnerability?

Ten years have passed since Heartbleed was first identified, but the security industry is still grappling with the question of branded vulnerabilit...

darkreading 1 year ago

500 Victims In, Black Basta Reinvents With Novel Vishing Strategy Ransomware groups have always created problems for their victims that only they could solve. Black Basta is taking that core idea in a creative, new direction.

Dark Reading

500 Victims In, Black Basta Reinvents With Novel Vishing Strategy

Ransomware groups have always created problems for their victims that only they could solve. Black Basta is taking that core idea in a creative, ne...

darkreading 1 year ago

Ukrainian, Latvian TV Hijacked to Broadcast Russian Celebrations At least 15 television channels were interrupted in Ukraine alone, which, reportedly, is not out of the norm in this "information war."

Dark Reading

Ukrainian, Latvian TV Hijacked to Broadcast Russian Celebrations

At least 15 television channels were interrupted in Ukraine alone, which, reportedly, is not out of the norm in this "information war."

darkreading 1 year ago

IntelBroker Nabs Europol Info; Agency Investigating Europe's cross-border law enforcement agency says the well-known hacking outfit, contrary to claims, did not access operational data.

Dark Reading

IntelBroker Nabs Europol Info; Agency Investigating

Europe

darkreading 1 year ago

Why Tokens Are Like Gold for Opportunistic Threat Actors When setting authentication token expiry policies, always lean in to security over employee convenience.

Dark Reading

Why Tokens Are Like Gold for Opportunistic Threat Actors

When setting authentication token expiry policies, always lean into security over employee convenience.

darkreading 1 year ago

Millions of IoT Devices at Risk from Flaws in Integrated Cellular Modem Researchers discovered seven vulnerabilities — including an unauthenticated RCE issue — in widely deployed Telit Cinterion modems.

Dark Reading

Millions of IoT Devices at Risk From Integrated Modem

Researchers discovered seven vulnerabilities — including an unauthenticated RCE issue — in widely deployed Telit Cinterion modems.

darkreading 1 year ago

CISO as a CTO: When and Why It Makes Sense Enterprises are increasingly recognizing that the CISO's skills and experience building risk-based cyber programs translate well to other C-suite positions.

Dark Reading

CISO as a CTO: When and Why It Makes Sense

Enterprises are increasingly recognizing that the CISO

darkreading 1 year ago

Reality Defender Wins RSAC Innovation Sandbox Competition In a field thick with cybersecurity startups showing off how they use AI and LLMs, Reality Defender stood out for its tool for detecting and labeling deepfakes and other artificial content.

Dark Reading

Reality Defender Wins RSAC Innovation Sandbox Competition

In a field thick with cybersecurity startups showing off how they use AI and LLMs, Reality Defender stood out for its tool for detecting and labeli...

darkreading 1 year ago

Is CISA's Secure by Design Pledge Toothless? CISA's agreement is voluntary and, frankly, basic. Signatories say that's a good thing.

Dark Reading

Is CISA

CISA

darkreading 1 year ago

Ascension Healthcare Suffers Major Cyberattack The attack cut off access to electronic healthcare records (EHRs) and ordering systems, plunging the organization and its health services into chaos.

Dark Reading

Ascension Healthcare Suffers Major Cyberattack

The attack cut off access to electronic healthcare records (EHRs) and ordering systems, plunging the organization and its health services into chaos.

darkreading 1 year ago

Dark Reading 'Drops' Its First Podcast Our brand-new podcast, Dark Reading Confidential, has officially launched. You don't want to miss our first episode with the CISO and chief legal officer from Reddit and a cybersecurity attorney, who ...

Dark Reading

Dark Reading

Our brand-new podcast, Dark Reading Confidential, has officially launched. You don

darkreading 1 year ago

Dark Reading Confidential: The CISO and the SEC Episode 1 of Dark Reading Confidential brings Frederick “Flee” Lee, CISO of Reddit, Beth Burgin Waller, a practicing cyber attorney who represents many CISOs, and Ben Lee, Chief Legal Officer of Reddi...

Dark Reading

Dark Reading Confidential: The CISO and the SEC

Dive into the complex relationship between the SEC and the Chief Information Security Officer (CISO) within publicly traded companies.

darkreading 1 year ago

You've Been Breached: What Now? Breaches are inevitable. Here are four steps to recovery and future-proofing your business.

Dark Reading

You

Breaches are inevitable. Here are four steps to recovery and future-proofing your business.

darkreading 1 year ago

Cybersecurity in a Race to Unmask a New Wave of AI-Borne Deepfakes Kevin Mandia, CEO of Mandiant at Google Cloud, calls for content "watermarks" as the industry braces for a barrage of mind-bending AI-generated fake audio and video traffic.

Dark Reading

Cybersecurity Races to Unmask New Wave of AI Deepfakes

Kevin Mandia, CEO of Mandiant at Google Cloud, calls for watermarks as the industry braces for a barrage of mind-bending AI-generated fake audio an...