Prudential Files Voluntary Breach Notice With SEC

The finance services giant says it was hacked — and reported the incident proactively before SEC requirements mandated it. It could be an anti-extortion move, or merely a brand protection effort.


https://www.darkreading.com/cybersecurit...notice-sec

Microsoft, OpenAI: Nation-States Are Weaponizing AI in Cyberattacks

It's not theoretical anymore: the world's major powers are working with large language models to enhance their offensive cyber operations.


https://www.darkreading.com/threat-intel...berattacks

10 Security Metrics Categories CISOs Should Present to the Board

Boards of directors don't care about a security program's minute technical details. They want to see how key performance indicators are tracked and used.


https://www.darkreading.com/cybersecurit...-the-board

AWS SNS Hijackings Fuel Cloud Smishing Campaign

Using a custom Python script to send bulk phishing messages with a USPS lure, the cyberattackers are posing a risk to consumer-facing organizations moving workloads to the cloud.


https://www.darkreading.com/cloud-securi...g-campaign

Cybersecurity's Transformative Shift

The industry is evolving from one of conventional threat detection toward a strategy that emphasizes context and preempts user behavior.


https://www.darkreading.com/cybersecurit...tive-shift

Russian APT Turla Wields Novel Backdoor Malware Against Polish NGOs

A spate of recent cyber-espionage attacks showcases Turla's brand-new modular custom malware, and an expansion of the state-sponsored group's scope of targets.


https://www.darkreading.com/cyberattacks...olish-ngos

DoJ Breaks Russian Military Botnet in Fancy Bear Takedown

The feds disrupted a Russian intelligence SOHO router botnet notable for being built with Moobot malware rather than custom code.


https://www.darkreading.com/cyberattacks...ry-botnet-

CISA HBOM Framework Doesn't Go Far Enough

CISA's recently introduced framework for hardware bill of materials is an important step in addressing semiconductor risks. But further tracking beyond manufacturing is critical to its usefulness.


https://www.darkreading.com/cyber-risk/c...far-enough

DataDome Expands Bot Bounty Program to the Public, Invites Researchers to Rigorously




https://www.darkreading.com/vulnerabilit...s-solution

Microsoft Exchange Server Flaw Exploited as a Zero-Day Bug

Microsoft has observed signs of active exploits targeting CVE-2024-2140.


https://www.darkreading.com/cyberattacks...ro-day-bug