Former Uber CISO Speaks Out, After 6 Years, on Data Breach, SolarWinds

Joe Sullivan, spared prison time, weighs in on the lessons learned from the 2016 Uber breach and the import of the SolarWinds CISO case.


https://www.darkreading.com/cyberattacks...solarwinds

Slovenian Electrical Utility HSE Suffers Ransomware Attack

The company's power production remains in operation, and authorities have been notified of the attack.


https://www.darkreading.com/cyberattacks...are-attack

Dark Reading Debuts Fresh New Site Design

Check out our new look — it's crisp, fast, and more reader-friendly.


https://www.darkreading.com/cybersecurit...ite-design

Critical Vulns Found in Ray Open Source Framework for AI/ML Workloads

Anyscale has dismissed the vulnerabilities as non-issues, according to researchers who reported the bugs to the company.


https://www.darkreading.com/vulnerabilit...-workloads

New BLUFFS attack lets attackers hijack Bluetooth connections


Researchers at Eurecom have developed six new attacks collectively named 'BLUFFS' that can break the secrecy of Bluetooth sessions, allowing for device impersonation and man-in-the-middle (MitM) attacks. [...]


https://www.bleepingcomputer.com/news/se...nnections/

Okta: October data breach affects all customer support system users

Okta's investigation into the breach of its Help Center environment last month revealed that the hackers obtained data belonging to all customer support system users. [...]


https://www.bleepingcomputer.com/news/se...tem-users/

Enterprise Generative AI Enters Its Citizen Development Era

Business users are building Copilots and GPTs with enterprise data. What can security teams do about it?


https://www.darkreading.com/cyber-risk/e...opment-era

Qatar Cyber Agency Runs National Cyber Drills

Qatari organizations participate in cybersecurity exercises to hone their incident response plans and processes.


https://www.darkreading.com/cyber-risk/q...ber-drills

Web Shells Gain Sophistication for Stealth, Persistence

A favorite post-exploitation tool continues to gain sophistication, with one recent example adding disguised log-in pages, credential stealing, and information gathering via services such as VirusTotal.


https://www.darkreading.com/cloud-securi...ersistence

Generative AI Takes on SIEM

IBM joins CrowdStrike and Microsoft in releasing AI models to cloud-native SIEM platforms.


https://www.darkreading.com/cybersecurit...es-on-siem