4 Strategies to Safeguard the Finance Industry Against Deepfake Onslaught

Through strategic measures and a united front, the finance industry can overcome the looming threat of deepfakes.

https://www.darkreading.com/vulnerabilit...-onslaught

New York Times Spoofed to Hide Russian Disinformation Campaign

"Operation Doppelganger" has convincingly masqueraded as multiple news sites with elaborate fake stories containing real bylines of journalists, blasting them out on social media platforms.

https://www.darkreading.com/threat-intel...n-campaign

APT Attacks From 'Earth Estries' Hit Gov't, Tech With Custom Malware

A sophisticated threat actor managed to fly under the radar for three years, despite flexing serious muscle.

https://www.darkreading.com/attacks-brea...om-malware

Chinese Group Spreads Android Spyware via Trojan Signal, Telegram Apps

Thousands of devices have become infected with "BadBazaar," malware previously used to spy on Uyghur and Turkic ethnic minorities in China.

https://www.darkreading.com/attacks-brea...egram-apps

Adversaries Ride RocketMQ Bug to DreamBus Bot Resurgence

Last seen in 2021, DreamBus Monero crypto bot is back and finding new life on vulnerable RocketMQ servers.

https://www.darkreading.com/attacks-brea...resurgence

A Brief History of ICS-Tailored Attacks

It's on the cyber defenders to learn from the past and make industrial control system networks hostile to attackers.

https://www.darkreading.com/attacks-brea...ed-attacks

Cyberattackers Swarm OpenFire Cloud Servers With Takeover Barrage

The Kinsing threat group has launched more than 1,000 cyberattacks in less than two months, exploiting a security vulnerability in the internal corporate messaging app in order to upload the malware and a cryptominer.

https://www.darkreading.com/remote-workf...er-barrage

Apple iPhone 14 Pro Offered Up to the Hacking Masses

Since launching in 2019, the Security Device Research Program has discovered 130 critical vulnerabilities; applications are now open for Apple's 2024 iteration.

https://www.darkreading.com/endpoint/app...ro-hacking

Paramount, Forever 21 Data Breaches Set Stage for Follow-on Attacks

The Forever 21 breach alone affects a half-million people, who could be a mix of consumers and employees; Paramount is staying mum on who exactly is impacted.

https://www.darkreading.com/attacks-brea...on-attacks

Are You Ready for the New NIST Control Around Public Disclosure Programs?

A new NIST control requires SaaS vendors to “establish a public reporting channel for receiving reports of vulnerabilities in organizational systems and system components.”


https://www.hackerone.com/security-compl...dp-control