Cloud-y Linux Malware Rains on Apache, Docker, Redis & Confluence

"Spinning YARN" cyberattackers wielding a Linux webshell are positioning for broader cloud compromise by exploiting common misconfigurations and a known Atlassian Confluence bug.


https://www.darkreading.com/cloud-securi...confluence

Japan on Line Breach: Clean Up Post-Merger Tech Sprawl

A Japanese ministry blames a shared Active Directory between merged tech companies Line and South Korea's Naver for a massive data breach last November.


https://www.darkreading.com/cybersecurit...ech-sprawl

CISO Sixth Sense: NIST CSF 2.0's Govern Function

2024 will redefine CISO leadership while acknowledging the management gap.


https://www.darkreading.com/cybersecurit...n-function

China-Linked Cyber Spies Blend Watering Hole, Supply Chain Attacks

The nation-state group compromised the website of a Tibetan festival and a software application to target user systems in Asia.


https://www.darkreading.com/cyberattacks...in-attacks

Don't Give Your Business Data to AI Companies

Handing over your business data to artificial intelligence companies comes with inherent risks.


https://www.darkreading.com/vulnerabilit...-companies

Linux Variants of Bifrost Trojan Evade Detection via Typosquatting

Spike in new versions of an old Trojan — which mimic legitimate VMware domains — alarms security researchers.


https://www.darkreading.com/cloud-securi...detection-

How CISA Fights Cyber Threats During Election Primary Season

Election cyber threats come from various places, including compromised voting machines, AI deepfakes, and potential physical harm to workers. But CISA has been working diligently with various public and private partners to stymie the risk.


https://www.darkreading.com/cybersecurit...ary-season

Patch Now: Apple Zero-Day Exploits Bypass Kernel Security

A pair of critical bugs could open the door to complete system compromise, including access to location information, iPhone camera and mic, and messages. Rootkitted attackers could theoretically perform lateral movement to corporate networks, too.


https://www.darkreading.com/ics-ot-secur...l-security

Veeam Launches Veeam Data Cloud




https://www.darkreading.com/cloud-securi...data-cloud

First BofA, Now Fidelity: Same Vendor Behind Third-Party Breaches

The private information of more than 28,000 people may have been accessed by unauthorized actors, thanks to a cyber incident at service provider Infosys McCamish — the same third party recently responsible for the Bank of America breach.


https://www.darkreading.com/cyberattacks...y-breaches