Cyberattackers Lure EU Diplomats With Wine-Tasting Offers

A targeted attack aiming to exploit geopolitical relations between India and Europe delivers previously undocumented, uniquely evasive backdoor malware.


https://www.darkreading.com/cyberattacks...ing-offers

'Voltzite' Zaps African Utilities as Part of Volt Typhoon's Onslaught

The China-backed APT that's been trying to set itself up inside US critical infrastructure for the purpose of disrupting physical processes is deploying a similar playbook in Africa.


https://www.darkreading.com/vulnerabilit...-onslaught

US Government Expands Role in Software Security

The White House Office of the National Cyber Director puts software developers on notice, calling for a move to memory-safe programming languages and the development of security metrics.


https://www.darkreading.com/application-...e-security

Echoes of SolarWinds in New 'Silver SAML' Attack Technique

A successor to the "Golden SAML" tactic used in the SolarWinds campaign, this new technique taps SAML response forgery to gain illegitimate access to apps and services.


https://www.darkreading.com/cyber-risk/r...-technique

Meet 'XHelper,' the All-in-One Android App for Global Money Laundering

User-friendly apps allow anybody to serve as traffickers for cybercrime syndicates.


https://www.darkreading.com/threat-intel...laundering

Ransomware-as-a-Service Spawns Wave of Cyberattacks in Middle East & Africa

Experts advise organizations in the region to refuse to pay ransom demands.


https://www.darkreading.com/cyberattacks...cks-in-mea

MTTR: The Most Important Security Metric

Measuring and tracking your mean time to remediate shows whether vulnerability management is reducing risk and closing opportunities for adversaries.


https://www.darkreading.com/cyberattacks...ity-metric

Hugging Face AI Platform Riddled With 100 Malicious Code-Execution Models

The finding underscores the growing risk of weaponizing publicly available AI models and the need for better security to combat the looming threat.


https://www.darkreading.com/application-...ion-models

MITRE Rolls Out 4 Brand-New CWEs for Microprocessor Security Bugs

Goal is to give chip designers and security practitioners in the semiconductor space a better understanding of major microprocessor flaws like Meltdown and Spectre.


https://www.darkreading.com/endpoint-sec...hitectures

Cloud Apps Make the Case for Pen-Testing-as-a-Service

Applications are increasingly distributed, expanding companies' cloud attack surfaces and requiring regular testing to find and fix vulnerabilities — and avoid the risk of a growing sprawl of services.


https://www.darkreading.com/application-...plications