Data Initiatives Force Closer Partnership Between CISOs, CDOs

Though security leaders and chief data officers both care about data management, their different missions have created a tension that needs addressing.

https://www.darkreading.com/risk/data-in...p-ciso-cdo

Hackers Target High-Privileged Okta Accounts via Help Desk

Threat actors convince employees to reset MFA for Super Admin accounts in the IAM service to leverage compromised accounts, impersonating users and moving laterally within an organization.

https://www.darkreading.com/cloud/hacker...-help-desk

Peiter 'Mudge' Zatko Lands Role as CISA Senior Technical Adviser

The former hacker and Twitter security executive will use his role to help fulfill the Biden administration's plans for the National Cybersecurity Strategy.

https://www.darkreading.com/careers-and-...technical-

GhostSec Leaks Source Code of Alleged Iranian Surveillance Tool

GhostSec has made the source code for what it calls a powerful surveillance tool openly available in a 26GB file, but FANAP denies its legitimacy.

https://www.darkreading.com/dr-global/gh...lance-tool

Hornetsecurity Releases 365 Total Protection Plan 4 for Microsoft 365



https://www.darkreading.com/application-...rosoft-365

Global Cloud Security Market to Reach $62.9B by 2028



https://www.darkreading.com/cloud/global...9b-by-2028

Tuya Smart and Amazon Web Services Collaborate to Establish an IoT Security Lab



https://www.darkreading.com/ics-ot/tuya-...curity-lab

LockBit Leaks Documents Filched From UK Defense Contractor

A company that builds physical perimeter defenses failed to keep the LockBit group from penetrating its cyber defenses.

https://www.darkreading.com/attacks-brea...contractor

Researchers Discover Critical Vulnerability in PHPFusion CMS

No patch is available yet for the bug, which can enable remote code execution under the correct circumstances.

https://www.darkreading.com/application-...fusion-cms

Overcoming Open Source Vulnerabilities in the Software Supply Chain

By securing access to code and running scans against all code changes, developers can better prevent — and detect — potential risks and vulnerabilities.

https://www.darkreading.com/microsoft/ov...ply-chain-