Cyber Insurance Needs to Evolve to Ensure Greater Benefit

A catastrophic cyber event hasn't yet come to pass, but vast amounts of personal data have been compromised. We need to be prepared for worst-case scenarios.


https://www.darkreading.com/cyber-risk/c...er-benefit

Global Law Enforcement Disrupts LockBit Ransomware Gang

Operation Cronos, a collab between authorities in the US, Canada, UK, Europe, Japan, and Australia — seizes data and website associated with the prolific cybercriminal organization and its affiliates.


https://www.darkreading.com/cybersecurit...mware-gang

Hacked Iraqi Voter Information Found for Sale Online

A 21.58GB database of stolen personal voter data from Iraq's Independent High Electoral Commission (IHEC) may have been the result of a supply chain attack.


https://www.darkreading.com/endpoint-sec...ale-online

'KeyTrap' DNS Bug Threatens Widespread Internet Outages

Thanks to a 24-year-old security vulnerability tracked as CVE-2023-50387, attackers could stall DNS servers with just a single malicious packet, effectively taking out wide swaths of the Internet.


https://www.darkreading.com/cloud-securi...et-outages

Median Ransomware Demands Grow to $600K a Pop

The now-disrupted LockBit gang outpaced its competitors in volume in 2023, as ransom amounts spiked 20% year-over-year.


https://www.darkreading.com/vulnerabilit...-grow-600k

Google's Cloud Run Service Spreads Several Bank Trojans

A surging bank malware campaign abuses Google Cloud Run and targets Latin America, with indications that it's hitting other regions as well, researchers warn.


https://www.darkreading.com/application-...k-trojans-

Joomla XSS Bugs Open Millions of Websites to RCE

Improper content filtering in a core function allows multiple paths to exploitation for CVE-2024-21726.


https://www.darkreading.com/application-...bsites-rce

Meta Disrupts 8 Spyware Firms, 3 Fake News Networks

While furiously trying to put out one fire — fake news — the social media giant is dealing with another growing threat: spies for hire.


https://www.darkreading.com/threat-intel...s-networks

Wyze Cameras Allow Accidental User Spying

About 13,000 users received camera images and feeds that weren't theirs. This cyber incident takes place only five months after the company experienced a similar issue and failed to be transparent with users about the issues it was facing.


https://www.darkreading.com/endpoint-sec...ser-spying

VMware urges admins to remove deprecated, vulnerable auth plug-in

VMware urged admins today to remove a discontinued authentication plugin exposed to authentication relay and session hijack attacks in Windows domain environments via two security vulnerabilities left unpatched. [...]


https://www.bleepingcomputer.com/news/se...h-plug-in/