Access Control Gap in Microsoft Active Directory Widens Enterprise Attack Surface

One researcher thinks trust is broken in AD. Microsoft disagrees that there's a security vulnerability. But enterprise IT environments should be aware of an authentication gap either way.

https://www.darkreading.com/risk/access-...ck-surface

CISA Trials Ransomware Warning System for Critical Infrastructure Orgs

An agency team will identify vulnerabilities being exploited by ransomware groups and alert organizations ahead of attacks, CISA says.

https://www.darkreading.com/ics-ot/cisa-...astructure

LockBit Threatens to Leak Stolen SpaceX Schematics

The ransomware group sent a message directly to Elon Musk: Pay or the confidential SpaceX information goes up for grabs on the Dark Web.

https://www.darkreading.com/ics-ot/lockb...schematics

Samsung Next Invests in Mitiga, Brings Total Funding to $45M

Financing will help support increasing customer demand while continuing to transform incident response for cloud and SaaS environments

https://www.darkreading.com/cloud/samsun...ing-to-45m

Microsoft Zero-Day Bugs Allow Security Feature Bypass

Security vendors urge organizations to fix the actively exploited bugs, in Microsoft Outlook and the Mark of the Web feature, immediately.

https://www.darkreading.com/vulnerabilit...ure-bypass

Camozzi Group and Radiflow Announce Collaboration on Industrial Systems Cybersecurity



https://www.darkreading.com/ics-ot/camoz...ersecurity

Optiv More Than Doubles Federal Presence With ClearShark Acquisition

Convergence of two leading cybersecurity companies creates federal sector powerhouse.

https://www.darkreading.com/risk/optiv-m...cquisition

How Patch Tuesday Keeps the Beat After 20 Years

Patch Tuesday turned security updates from chaotic events into a routine. Here's how we got here and where things might be heading.

https://www.darkreading.com/edge-article...r-20-years

Google Proposes Reducing TLS Cert Life Span to 90 Days

Organizations will likely have until the end of 2024 to gain visibility and control over their keys and certificates.

https://www.darkreading.com/dr-tech/goog...to-90-days

Are We Doing Enough to Protect Our Unstructured Data?

Organizations are coming under pressure to protect their data, but does all data need the same security? To secure it, you first need to know what and where it is.

https://www.darkreading.com/omdia/are-we...ured-data-