Millions of Malicious Repositories Flood GitHub

GitHub and cyberattackers are waging a quiet, automated war over malicious repos.


https://www.darkreading.com/application-...ood-github

What Cybersecurity Chiefs Need From Their CEOs

By helping CISOs navigate the expectations being placed on their shoulders, CEOs can greatly benefit their companies.


https://www.darkreading.com/cybersecurit...their-ceos

Name That Edge Toon: How Charming

Feeling creative? Submit your caption and our panel of experts will reward the winner with a $25 Amazon gift card.


https://www.darkreading.com/ics-ot-secur...w-charming

Middle East Leads in Deployment of DMARC Email Security

Yet challenges remain as many nation's policies for the email authentication protocol remain lax and could run afoul of Google's and Yahoo's restrictions.


https://www.darkreading.com/cyber-risk/m...deployment

Predator Spyware Alive & Well and Expanding

Mercenary spyware operator has rebuilt its network infrastructure and now operates in 11 countries, with one of the newest additions, Botswana.


https://www.darkreading.com/remote-workf...-expanding

Amex Customer Data Exposed in Third-Party Breach

The breach occurred through a third-party service provider frequently used by the company's travel services division.


https://www.darkreading.com/cyberattacks...rty-breach

Zero-Click GenAI Worm Spreads Malware, Poisoning Models

35 years after the Morris worm, we're still dealing with a version of the same issue: data overlapping with control.


https://www.darkreading.com/application-...ing-models

Critical TeamCity Bugs Endanger Software Supply Chain

Customers should immediately patch critical vulnerabilities in on-prem deployments of the CI/CD pipeline tool JetBrains TeamCity that could allow threat actors to gain admin control over servers.


https://www.darkreading.com/application-...pply-chain

Seoul Spies Say North Korea Hackers Stole Semiconductor Secrets

The DPRK is using cyberattacks to steal designs and other data from South Korean microchip manufacturers, according to Seoul's National Intelligence Service.


https://www.darkreading.com/cyberattacks...or-secrets

Exploit available for new critical TeamCity auth bypass bug, patch now

A critical vulnerability (CVE-2024-27198) in the TeamCity On-Premises CI/CD solution from JetBrains can let a remote unauthenticated attacker take control of the server with administrative permissions. [...]


https://www.bleepingcomputer.com/news/se...patch-now/