Supply Chain Attackers Escalate With GitHub Dependabot Impersonation

Armed with stolen developer passcodes, attackers have checked in changes to repositories under the automation feature's name in an attempt to escape notice.

https://www.darkreading.com/application-...ersonation

4 Legal Surprises You May Encounter After a Cybersecurity Incident

Many organizations are not prepared to respond to all the constituencies that come knocking after a breach or ransomware incident.

https://www.darkreading.com/attacks-brea...y-incident

Looking Beyond the Hype Cycle of AI/ML in Cybersecurity

Artificial intelligence and machine learning aren't yet delivering on their cybersecurity promises. How can we close the gaps?

https://www.darkreading.com/vulnerabilit...ersecurity

Novel ZenRAT Scurries Onto Systems via Fake Password Manager Tool

Attackers exclusively target Windows users with an impersonation website that distributes information-stealing malware.

https://www.darkreading.com/endpoint/nov...nager-tool

Q&A: UK Ambassador on Creating New Cybersecurity Agencies Around the World

How the UK is assisting other nations in forming their own versions of a National Centre for Cybersecurity (NCSC).

https://www.darkreading.com/dr-global/q-...-the-world

Google fixes fifth actively exploited Chrome zero-day of 2023


Google has patched the fifth Chrome zero-day vulnerability exploited in attacks since the start of the year in emergency security updates released today. [...]


https://www.bleepingcomputer.com/news/se...y-of-2023/

Budworm hackers target telcos and govt orgs with custom malware


A Chinese cyber-espionage hacking group tracked as Budworm has been observed targeting a telecommunication firm in the Middle East and a government entity in Asia using a new variant of its custom 'SysUpdate' backdoor. [...]


https://www.bleepingcomputer.com/news/se...m-malware/

Security researcher stopped at US border for investigating crypto scam


Security researcher Sam Curry describes a stressful situation he encountered upon his return to the U.S. when border officials and federal agents seized and searched his electronic devices. Curry was further served with a 'Grand Jury' subpoena that demanded him to appear in court for testimony. [...]


https://www.bleepingcomputer.com/news/se...ypto-scam/

Cisco Catalyst SD-WAN Manager flaw allows remote server access


Cisco is warning of five new Catalyst SD-WAN Manager products vulnerabilities with the most critical allowing unauthenticated remote access to the server. [...]


https://www.bleepingcomputer.com/news/se...er-access/

Cisco urges admins to fix IOS software zero-day exploited in attacks


Cisco warned customers on Wednesday to patch a zero-day IOS and IOS XE software vulnerability targeted by attackers in the wild. [...]


https://www.bleepingcomputer.com/news/se...n-attacks/