BBTok Banking Trojan Impersonates 40+ Banks to Hijack Victim Accounts

Attackers use convincing fake website interfaces and sophisticated geo-fencing to target users exclusively in Mexico and Brazil with a new variant of the malware.

https://www.darkreading.com/endpoint/bbt...m-accounts

Mastering Defense-In-Depth and Data Security in the Cloud Era

Though widely used in many organizations, the concept still requires adaptation when aimed at protecting against new types of attacks.

https://www.darkreading.com/cloud/master...-cloud-era

Growing Chinese Tech Influence in Africa Spurs 'Soft Power' Concerns

A working group is rolling out in developing parts of the world, in response to concerns about the amount of technology being rolled out and across Africa by Chinese companies.

https://www.darkreading.com/dr-global/ch...r-concerns

MGM Restores Casino Operations 10 Days After Cyberattack

The lost revenue due to downtime for gaming and hotel bookings is difficult to ballpark.

https://www.darkreading.com/endpoint/mgm...yberattack

T-Mobile Racks Up Third Consumer Data Exposure of 2023

The mobile company states that the issue was due to a glitch that occurred in an update.

https://www.darkreading.com/application-...osure-2023

OPSWAT-Sponsored SANS 2023 ICS/OT Cybersecurity Report Reveals Vital Priorities to M



https://www.darkreading.com/ics-ot/-opsw...ng-threats

Microsoft Copilot rolls out with Windows 11 22H2 update next week


Microsoft will start rolling out its Copilot digital assistant to all customers next week, on September 26th, together with a host of new AI-powered capabilities as part of a new Windows 11 22H2 update. [...]


https://www.bleepingcomputer.com/news/mi...next-week/

Apple emergency updates fix 3 new zero-days exploited in attacks


Apple released emergency security updates to patch three new zero-day vulnerabilities exploited in attacks targeting iPhone and Mac users, for a total of 16 zero-days patched this year. [...]


https://www.bleepingcomputer.com/news/ap...n-attacks/

GitHub passkeys generally available for passwordless sign-ins


GitHub has made passkeys generally available across the platform today to secure accounts against phishing and allow passwordless logins for all users. [...]


https://www.bleepingcomputer.com/news/se...-sign-ins/

‘Sandman’ hackers backdoor telcos with new LuaDream malware

A previously unknown threat actor dubbed 'Sandman' targets telecommunication service providers in the Middle East, Western Europe, and South Asia, using a modular info-stealing malware named 'LuaDream.' [...]


https://www.bleepingcomputer.com/news/se...m-malware/