This is the RSS 2.0 feed from www.secnews.physaphae.fr. IT's a simple agragated flow of multiple articles soruces. Liste of sources, can be found on www.secnews.physaphae.fr. 2025-05-10T14:34:29+00:00 www.secnews.physaphae.fr Dark Reading - Informationweek Branch The agency aims to burn down the backlog of vulnerabilities that need enrichment using additional funding and a third-party contract, but what\'s the long-term solution?]]> 2024-06-04T13:00:00+00:00 https://www.darkreading.com/application-security/nist-commits-to-vulnerability-plan-but-researchers-concerns-remain www.secnews.physaphae.fr/article.php?IdArticle=8513002 False Vulnerability None 3.0000000000000000 Dark Reading - Informationweek Branch The agency aims to burn down the backlog of vulnerabilities waiting to be added to the National Vulnerabilities Database via additional funding, third-party contract, and partnership with CISA.]]> 2024-06-04T13:00:00+00:00 https://www.darkreading.com/vulnerabilities-threats/nist-commits-to-plan-resume-nvd-work www.secnews.physaphae.fr/article.php?IdArticle=8513070 False Vulnerability None 3.0000000000000000 Dark Reading - Informationweek Branch Sideloading apps is now possible on iOS devices, forcing Apple to add some security features in an attempt to mitigate the dangers of loading unknown apps.]]> 2024-06-03T21:45:11+00:00 https://www.darkreading.com/mobile-security/ways-apple-ios-sideloading-can-be-more-secure www.secnews.physaphae.fr/article.php?IdArticle=8512625 False None None 3.0000000000000000 Dark Reading - Informationweek Branch 2024-06-03T21:19:16+00:00 https://www.darkreading.com/cybersecurity-operations/knowbe4-and-mobilemind-collaborate-to-provide-cybersecurity-training-for-k12-school-districts www.secnews.physaphae.fr/article.php?IdArticle=8513036 False None None 2.0000000000000000 Dark Reading - Informationweek Branch 2024-06-03T21:14:11+00:00 https://www.darkreading.com/cloud-security/ockam-and-redpanda-partner-to-launch-zero-trust-streaming-data-platform www.secnews.physaphae.fr/article.php?IdArticle=8512626 False None None 2.0000000000000000 Dark Reading - Informationweek Branch 2024-06-03T21:05:56+00:00 https://www.darkreading.com/cybersecurity-operations/portkey-announces-integration-of-zero-knowledge-proofs-for-enhanced-identity-management-and-security www.secnews.physaphae.fr/article.php?IdArticle=8512602 False None None 2.0000000000000000 Dark Reading - Informationweek Branch Because of the role the Confluence Server plays in managing documentation and knowledge data bases, the researchers recommend users upgrade to patch CVE-2024-21683 as soon as possible.]]> 2024-06-03T21:00:50+00:00 https://www.darkreading.com/vulnerabilities-threats/atlassian-confluence-high-severity-bug-allows-code-execution www.secnews.physaphae.fr/article.php?IdArticle=8512627 False None None 3.0000000000000000 Dark Reading - Informationweek Branch As always, Russian APTs are hoping to foment unrest by stoking existing societal divides and fears, this time around the Olympics and EU politics; and, concerns remain around physical disruption.]]> 2024-06-03T20:47:50+00:00 https://www.darkreading.com/threat-intelligence/russia-cyber-operations-summer-olympics www.secnews.physaphae.fr/article.php?IdArticle=8512603 False None None 3.0000000000000000 Dark Reading - Informationweek Branch International law enforcement Operation Endgame shifts its crackdown to focus on individual adversaries.]]> 2024-06-03T19:48:34+00:00 https://www.darkreading.com/cybersecurity-operations/europols-hunt-begins-for-emotet-malware-mastermind www.secnews.physaphae.fr/article.php?IdArticle=8512604 False Malware,Legislation None 2.0000000000000000 Dark Reading - Informationweek Branch Ticketmaster parent Live Nation has filed a voluntary SEC data breach notification, while one of its cloud providers, Snowflake, also confirmed targeted cyberactivity against some of its customers.]]> 2024-06-03T17:20:05+00:00 https://www.darkreading.com/cyberattacks-data-breaches/ticketmaster-confirms-cloud-breach-murky-details www.secnews.physaphae.fr/article.php?IdArticle=8512538 False Data Breach,Cloud None 2.0000000000000000 Dark Reading - Informationweek Branch Feeling creative? Submit your caption and our panel of experts will reward the winner with a $25 Amazon gift card.]]> 2024-06-03T16:36:25+00:00 https://www.darkreading.com/cybersecurity-operations/name-that-edge-toon-zonked-out www.secnews.physaphae.fr/article.php?IdArticle=8512513 False None None 2.0000000000000000 Dark Reading - Informationweek Branch There is more that needs to be done, but, so far, the initiative is a success.]]> 2024-06-03T14:00:00+00:00 https://www.darkreading.com/vulnerabilities-threats/cisas-secure-by-design-initiative-at-1-report-card www.secnews.physaphae.fr/article.php?IdArticle=8512421 False None None 3.0000000000000000 Dark Reading - Informationweek Branch Amid surging attacks, Kenya aims to expand its technology sector and improve cybersecurity to protect the country\'s fast-growing digital economy.]]> 2024-06-03T05:00:00+00:00 https://www.darkreading.com/cybersecurity-operations/allies-kenya-us-bolster-digital-security-africa www.secnews.physaphae.fr/article.php?IdArticle=8512163 False None None 3.0000000000000000 Dark Reading - Informationweek Branch Attorneys are increasingly realizing that forensics investigators have skills analyzing documents and uncovering digital clues that could help them in non-cybersecurity cases.]]> 2024-05-31T20:39:10+00:00 https://www.darkreading.com/endpoint-security/lawyers-forensics-investigators-help-outside-cybersecurity www.secnews.physaphae.fr/article.php?IdArticle=8511787 False None None 3.0000000000000000 Dark Reading - Informationweek Branch The previously unknown threat actor uses tools similar to those used by North Korean APT groups, according to Cisco Talos.]]> 2024-05-31T20:11:38+00:00 https://www.darkreading.com/cyberattacks-data-breaches/lilacsquid-apt-employs-open-source-tools-quasarrat www.secnews.physaphae.fr/article.php?IdArticle=8510811 False Tool,Threat None 2.0000000000000000 Dark Reading - Informationweek Branch Our collection of the most relevant reporting and industry perspectives for those guiding cybersecurity strategies and focused on SecOps. Also included: fighting cybersecurity burnout; BlackSuit ransomware; the SEC breach rules and risk management.]]> 2024-05-31T19:56:27+00:00 https://www.darkreading.com/cybersecurity-operations/ciso-corner-federal-cyber-deadlines-loom-private-chatbot-danger www.secnews.physaphae.fr/article.php?IdArticle=8510812 False Ransomware None 2.0000000000000000 Dark Reading - Informationweek Branch Though information such as dates of birth, email addresses, and home addresses were compromised, "the Beeb" assures individuals that financial information is still protected.]]> 2024-05-31T19:32:24+00:00 https://www.darkreading.com/cyberattacks-data-breaches/bbc-breach-puts-25k-pension-scheme-members-at-risk www.secnews.physaphae.fr/article.php?IdArticle=8510785 False None None 2.0000000000000000 Dark Reading - Informationweek Branch Most of the operations were feckless efforts with little impact, but they illustrate how AI is changing the game for inauthentic content on both the adversary and defense sides.]]> 2024-05-31T18:03:51+00:00 https://www.darkreading.com/threat-intelligence/openai-disrupts-5-ai-powered-state-backed-influence-ops www.secnews.physaphae.fr/article.php?IdArticle=8510758 False None None 2.0000000000000000 Dark Reading - Informationweek Branch The Russia-aligned FlyingYeti\'s phishing campaign exploited Ukrainian citizens\' financial stress to spread Cookbox malware.]]> 2024-05-31T15:10:54+00:00 https://www.darkreading.com/cyberattacks-data-breaches/flyingyeti-apt-cookbox-malware-winrar www.secnews.physaphae.fr/article.php?IdArticle=8510679 False Malware None 2.0000000000000000 Dark Reading - Informationweek Branch Consumer data is still a prime target for threat actors, and organizational consumption of data must be aligned to protecting it. The new rights act seeks to do some of this, but it still needs tweaking.]]> 2024-05-31T14:00:00+00:00 https://www.darkreading.com/cyber-risk/data-privacy-age-of-genai www.secnews.physaphae.fr/article.php?IdArticle=8510624 False Threat None 3.0000000000000000 Dark Reading - Informationweek Branch Europol undertook dropper malware botnet takedown while US law enforcement dismantled a sprawling cybercrime botnet for hire.]]> 2024-05-30T20:20:19+00:00 https://www.darkreading.com/cyberattacks-data-breaches/cops-swarm-global-botnet-cybercrime-infrastructure-in-two-massive-ops www.secnews.physaphae.fr/article.php?IdArticle=8510231 False Malware,Legislation None 3.0000000000000000 Dark Reading - Informationweek Branch Companies are looking to large language models to help their employees glean information from unstructured data, but vulnerabilities could lead to disinformation and, potentially, data leaks.]]> 2024-05-30T19:53:04+00:00 https://www.darkreading.com/application-security/flawed-ai-tools-create-worries-for-private-llms-chatbots www.secnews.physaphae.fr/article.php?IdArticle=8510203 False Tool,Vulnerability None 3.0000000000000000 Dark Reading - Informationweek Branch This time it\'s the identity management service provider\'s cross-origin authentication feature that\'s being targeted by adversaries.]]> 2024-05-30T15:43:41+00:00 https://www.darkreading.com/cyberattacks-data-breaches/okta-warns-once-again-of-credential-stuffing-attacks www.secnews.physaphae.fr/article.php?IdArticle=8510087 False None None 3.0000000000000000 Dark Reading - Informationweek Branch By adopting a stance of coordinated disclosure for exploits, security researchers can give organizations time to patch vulnerabilities before they are exploited in the wild.]]> 2024-05-30T14:00:00+00:00 https://www.darkreading.com/vulnerabilities-threats/argument-for-coordinated-disclosure-of-new-exploits www.secnews.physaphae.fr/article.php?IdArticle=8510026 False Vulnerability None 3.0000000000000000 Dark Reading - Informationweek Branch Stealthy ad fraud rings turn legitimate marketing into spam at a large scale, creating 200M+ bid requests daily.]]> 2024-05-30T13:00:00+00:00 https://www.darkreading.com/threat-intelligence/shady-merry-go-round-ad-fraud-network-orgs-hemorrhaging-cash www.secnews.physaphae.fr/article.php?IdArticle=8509990 False Spam None 2.0000000000000000 Dark Reading - Informationweek Branch Security teams should understand their providers\' approach to data privacy, transparency, user guidance, and secure design and development.]]> 2024-05-30T12:40:01+00:00 https://www.darkreading.com/cybersecurity-operations/four-security-questions-to-ask-your-enterprise-generative-ai-provider www.secnews.physaphae.fr/article.php?IdArticle=8509991 False None None 2.0000000000000000 Dark Reading - Informationweek Branch When security professionals are at the end of their rope - feeling both mentally and physically exhausted - it\'s often because of burnout. Here are ways to combat it.]]> 2024-05-30T02:27:14+00:00 https://www.darkreading.com/cybersecurity-operations/9-tips-to-avoid-burnout-in-cybersecurity www.secnews.physaphae.fr/article.php?IdArticle=8509714 False None None 3.0000000000000000 Dark Reading - Informationweek Branch It\'s unclear whether a dataset for sale on the site allegedly containing data from more than 500 million TicketMaster users is real or just law enforcement bait.]]> 2024-05-29T21:32:32+00:00 https://www.darkreading.com/cyberattacks-data-breaches/leak-site-breachforums-springs-back-to-life-weeks-after-fbi-takedown www.secnews.physaphae.fr/article.php?IdArticle=8509582 False Legislation None 2.0000000000000000 Dark Reading - Informationweek Branch 2024-05-29T21:06:07+00:00 https://www.darkreading.com/application-security/vicone-partners-with-42crunch-to-deliver-uniquely-comprehensive-security-across-sdv-and-connected-vehicle-ecosystem www.secnews.physaphae.fr/article.php?IdArticle=8509583 False None None 2.0000000000000000 Dark Reading - Informationweek Branch 2024-05-29T20:53:02+00:00 https://www.darkreading.com/ics-ot-security/digital-twin-technology-can-improve-water-utility-management-says-info-tech-research-group www.secnews.physaphae.fr/article.php?IdArticle=8509550 False None None 2.0000000000000000 Dark Reading - Informationweek Branch 2024-05-29T20:40:29+00:00 https://www.darkreading.com/ics-ot-security/nreca-signs-mou-with-electricity-information-sharing-and-analysis-center www.secnews.physaphae.fr/article.php?IdArticle=8509551 False None None 2.0000000000000000 Dark Reading - Informationweek Branch 2024-05-29T20:35:47+00:00 https://www.darkreading.com/cyber-risk/bforeai-launches-precrime-guarantee-program-for-seamless-cyber-risk-coverage www.secnews.physaphae.fr/article.php?IdArticle=8509552 False None None 2.0000000000000000 Dark Reading - Informationweek Branch North Korea\'s newest threat actor uses every trick in the nation-state APT playbook, and most of cybercrime\'s tricks, too. It also developed a whole video game company to hide malware.]]> 2024-05-29T20:04:06+00:00 https://www.darkreading.com/threat-intelligence/microsoft-moonlight-sleet-apt-melds-espionage-financial-goals www.secnews.physaphae.fr/article.php?IdArticle=8509553 False Malware,Threat None 2.0000000000000000 Dark Reading - Informationweek Branch The political consultant who wrote the script and paid for the deepfake audio used in robocalls was fined $6 million by the FCC.]]> 2024-05-29T18:16:02+00:00 https://www.darkreading.com/cyber-risk/mastermind-behind-biden-ai-deepfake-indicted-for-robocall-scheme www.secnews.physaphae.fr/article.php?IdArticle=8509484 False None None 2.0000000000000000 Dark Reading - Informationweek Branch Corporate admins should patch the max-severity CVE-2024-23108 immediately, which allows unauthenticated command injection.]]> 2024-05-29T18:04:01+00:00 https://www.darkreading.com/vulnerabilities-threats/exploit-fortinet-critical-rce-bug-siem-root-access www.secnews.physaphae.fr/article.php?IdArticle=8509452 False Threat None 3.0000000000000000 Dark Reading - Informationweek Branch Researchers went in-depth on an attack by the threat group, which mainly targets US companies in the education and industrial goods sectors, specifically to maximize financial gain.]]> 2024-05-29T14:43:22+00:00 https://www.darkreading.com/cyberattacks-data-breaches/blacksuit-dozens-victims-curated-ransomware www.secnews.physaphae.fr/article.php?IdArticle=8509350 False Ransomware,Threat,Industrial None 2.0000000000000000 Dark Reading - Informationweek Branch It\'s time to rethink the pivotal role incentives play in shaping behavior to find and disclose software vulnerabilities. More accurate guidance to reflect real-world risks and a tiered verification process to establish potential impact could slow misleading submissions.]]> 2024-05-29T14:00:00+00:00 https://www.darkreading.com/vulnerabilities-threats/why-cves-are-an-incentives-problem www.secnews.physaphae.fr/article.php?IdArticle=8509315 False Vulnerability None 3.0000000000000000 Dark Reading - Informationweek Branch Targeting India\'s government, defense, and aerospace sectors, the cyber-threat group now attacks Linux as well as Windows in its quest to compromise the Indian military\'s homegrown MayaOS Linux systems.]]> 2024-05-29T03:30:00+00:00 https://www.darkreading.com/cyberattacks-data-breaches/pakistani-transparent-tribe-apt-aims-for-cross-platform-impact www.secnews.physaphae.fr/article.php?IdArticle=8508997 False None None 3.0000000000000000 Dark Reading - Informationweek Branch In attacks over the past three months, threat actors have exploited more than 80 vulnerabilities to accelerate distribution of the Mirai variant.]]> 2024-05-28T21:01:11+00:00 https://www.darkreading.com/cyberattacks-data-breaches/catddos-threat-groups-sharply-ramp-up-ddos-attacks www.secnews.physaphae.fr/article.php?IdArticle=8508829 False Vulnerability,Threat None 3.0000000000000000 Dark Reading - Informationweek Branch Reasonable cybersecurity is highly subjective and organizations need to plan carefully in order to quantify cyber risk and apply security controls.]]> 2024-05-28T20:26:16+00:00 https://www.darkreading.com/cyber-risk/making-the-case-for-reasonable-cybersecurity www.secnews.physaphae.fr/article.php?IdArticle=8508969 False None None 3.0000000000000000 Dark Reading - Informationweek Branch Using VPNs as an initial access vector is ironic, given that security is the very reason enterprises employ them in the first place.]]> 2024-05-28T19:25:20+00:00 https://www.darkreading.com/threat-intelligence/attackers-target-check-point-vpns-access-corporate-networks www.secnews.physaphae.fr/article.php?IdArticle=8508765 False None None 3.0000000000000000 Dark Reading - Informationweek Branch The committee is being set up as the ChatGPT creator begins to train its latest large language model, GPT-5, which will reach "a new level of capabilities."]]> 2024-05-28T18:05:25+00:00 https://www.darkreading.com/cybersecurity-operations/openai-forms-another-safety-committee-after-dismantling-prior-team www.secnews.physaphae.fr/article.php?IdArticle=8508734 False None ChatGPT 2.0000000000000000 Dark Reading - Informationweek Branch The dangerous Anatsa banking Trojan is among the malware being spread to Android users via decoy mobile apps in recent months.]]> 2024-05-28T14:20:51+00:00 https://www.darkreading.com/endpoint-security/90-malicious-apps-55-million-downloads-google-play www.secnews.physaphae.fr/article.php?IdArticle=8508604 False Malware,Mobile None 2.0000000000000000 Dark Reading - Informationweek Branch Insights from three companies that recently reported breaches under the new disclosure regulations.]]> 2024-05-28T14:00:00+00:00 https://www.darkreading.com/cyberattacks-data-breaches/secs-new-take-on-cybersecurity-risk-management www.secnews.physaphae.fr/article.php?IdArticle=8508605 False None None 3.0000000000000000 Dark Reading - Informationweek Branch There\'s plenty of upside to this emerging technology, especially if organizations smartly plan for GenAI\'s rollout and long-term management.]]> 2024-05-28T13:17:31+00:00 https://www.darkreading.com/vulnerabilities-threats/looking-to-leverage-generative-ai-prep-for-success-with-these-4-tips www.secnews.physaphae.fr/article.php?IdArticle=8508569 False None None 3.0000000000000000 Dark Reading - Informationweek Branch So you think you know Interpol? Here are some key details of how this international law enforcement entity disrupts cybercrime worldwide.]]> 2024-05-27T06:00:00+00:00 https://www.darkreading.com/cyberattacks-data-breaches/5-facts-about-how-interpol-fights-cybercrime www.secnews.physaphae.fr/article.php?IdArticle=8507622 False Legislation None 3.0000000000000000 Dark Reading - Informationweek Branch Despite Microsoft\'s reassurances, multiple security researchers describe the technology as problematic for users and their organizations.]]> 2024-05-24T18:10:16+00:00 https://www.darkreading.com/data-privacy/microsofts-recall-feature-draws-criticism-from-privacy-advocates www.secnews.physaphae.fr/article.php?IdArticle=8506266 False None None 2.0000000000000000 Dark Reading - Informationweek Branch 2024-05-24T18:03:30+00:00 https://www.darkreading.com/ics-ot-security/research-from-claroty-s-team82-highlights-remote-access-risks-facing-mission-critical-ot-assets www.secnews.physaphae.fr/article.php?IdArticle=8506267 False Industrial None 3.0000000000000000 Dark Reading - Informationweek Branch Users get duped into downloading malicious files disguised to look like an application that uses artificial intelligence to alter voices.]]> 2024-05-24T17:21:20+00:00 https://www.darkreading.com/threat-intelligence/ai-voice-generator-used-to-drop-gipy-malware www.secnews.physaphae.fr/article.php?IdArticle=8506240 False Malware None 3.0000000000000000 Dark Reading - Informationweek Branch The tech company has rolled out fixes for a type confusion vulnerability that has already been exploited by malicious actors.]]> 2024-05-24T15:31:07+00:00 https://www.darkreading.com/vulnerabilities-threats/google-discovers-fourth-zero-day-in-less-than-a-month www.secnews.physaphae.fr/article.php?IdArticle=8506193 False Vulnerability,Threat None 3.0000000000000000 Dark Reading - Informationweek Branch As the digital landscape evolves, these words must become an impetus for innovation and dialogue, not insurmountable barriers.]]> 2024-05-24T14:00:00+00:00 https://www.darkreading.com/vulnerabilities-threats/when-no-and-good-enough-challenge-cybersecurity www.secnews.physaphae.fr/article.php?IdArticle=8506137 False None None 2.0000000000000000 Dark Reading - Informationweek Branch The SEC\'s lawsuit may take years to resolve through litigation, but here are five things CISOs should do now to protect both themselves as individuals as well as their organizations.]]> 2024-05-24T13:51:48+00:00 https://www.darkreading.com/cyber-risk/the-sec-solarwinds-case-what-ciso-should-do-now www.secnews.physaphae.fr/article.php?IdArticle=8506138 False None None 2.0000000000000000 Dark Reading - Informationweek Branch An effective, long-term XDR strategy will address the ongoing need for rapid analysis and continual vetting of the latest threat intelligence.]]> 2024-05-24T12:31:01+00:00 https://www.darkreading.com/cybersecurity-operations/future-proof-your-cybersecurity-ai-strategy www.secnews.physaphae.fr/article.php?IdArticle=8506104 False Threat None 2.0000000000000000 Dark Reading - Informationweek Branch CyberArk\'s $1.54 billion agreement to buy Venafi is a sign of how human and machine identities will converge with certificate lifecycle management.]]> 2024-05-23T22:21:23+00:00 https://www.darkreading.com/identity-access-management-security/cyberark-goes-all-in-on-machine-identity-with-venafi-deal www.secnews.physaphae.fr/article.php?IdArticle=8506105 False None None 2.0000000000000000 Dark Reading - Informationweek Branch 2024-05-23T21:58:21+00:00 https://www.darkreading.com/application-security/concentric-ai-to-unveil-new-data-security-remediation-and-compliance-reporting-capabilities-at-infosecurity-europe-2024 www.secnews.physaphae.fr/article.php?IdArticle=8505704 False None None 2.0000000000000000 Dark Reading - Informationweek Branch Much like an airplane's dashboard, configurations are the way we control cloud applications and SaaS tools. It's also the entry point for too many security threats. Here are some ideas for making the configuration process more secure.]]> 2024-05-23T21:56:44+00:00 https://www.darkreading.com/cloud-security/seizing-control-cloud-security-configuration-cockpit www.secnews.physaphae.fr/article.php?IdArticle=8505705 False Tool,Cloud None 2.0000000000000000 Dark Reading - Informationweek Branch 2024-05-23T21:51:26+00:00 https://www.darkreading.com/cybersecurity-operations/socradar-secures-25-2m-in-funding-to-combat-multibillion-dollar-cyber-security-threats www.secnews.physaphae.fr/article.php?IdArticle=8505706 False None None 2.0000000000000000 Dark Reading - Informationweek Branch 2024-05-23T21:42:41+00:00 https://www.darkreading.com/cyberattacks-data-breaches/bugcrowd-acquires-informer-to-enhance-attack-surface-management-penetration-testing www.secnews.physaphae.fr/article.php?IdArticle=8505707 False None None 2.0000000000000000 Dark Reading - Informationweek Branch With more than 10,000 installations across prisons, courts, and governments, impacted Justice AV Solutions users are urged to re-image affected endpoints and reset credentials.]]> 2024-05-23T20:58:00+00:00 https://www.darkreading.com/cyberattacks-data-breaches/courtroom-recording-platform-javs-hijacked-for-supply-chain-attack www.secnews.physaphae.fr/article.php?IdArticle=8505676 False None None 3.0000000000000000 Dark Reading - Informationweek Branch The two MIT graduates discovered a flaw in a common trading tool for the Ethereum blockchain. Does it presage problems ahead for cryptocurrency?]]> 2024-05-23T20:38:07+00:00 https://www.darkreading.com/cyberattacks-data-breaches/mit-brothers-charged-with-exploiting-ethereum-to-steal-25-million-dollars www.secnews.physaphae.fr/article.php?IdArticle=8505677 False Tool None 3.0000000000000000 Dark Reading - Informationweek Branch The spyware is able to capture screenshots of a user's device every few seconds from any location globally.]]> 2024-05-23T20:17:21+00:00 https://www.darkreading.com/cyber-risk/stalkerware-app-with-security-bug-discovered-on-hotel-systems www.secnews.physaphae.fr/article.php?IdArticle=8505678 False None None 2.0000000000000000 Dark Reading - Informationweek Branch Microsoft researchers discover an old-timey scam with a facelift for the cloud era: hacking retailers' portals to make it rain gift cards.]]> 2024-05-23T18:41:33+00:00 https://www.darkreading.com/threat-intelligence/new-gift-card-scam-targets-retailers-not-buyers-to-print-endless-money www.secnews.physaphae.fr/article.php?IdArticle=8505619 False Cloud None 2.0000000000000000 Dark Reading - Informationweek Branch The finding underscores the challenges of protecting data from multiple customers across AI-as-a-service solutions, especially in environments that run AI models from untrusted sources.]]> 2024-05-23T14:00:00+00:00 https://www.darkreading.com/cloud-security/critical-flaw-in-replicate-ai-platform-exposes-customer-models-proprietary-data www.secnews.physaphae.fr/article.php?IdArticle=8505470 False None None 3.0000000000000000 Dark Reading - Informationweek Branch With the right mix of caution, creativity, and commitment, we can build a future where LLMs are not just powerful, but also fundamentally trustworthy.]]> 2024-05-23T14:00:00+00:00 https://www.darkreading.com/cybersecurity-operations/new-mindset-needed-for-large-language-models www.secnews.physaphae.fr/article.php?IdArticle=8505471 False None None 3.0000000000000000 Dark Reading - Informationweek Branch Burnout has been an oft-reported problem among security professionals for years. Are there any new ideas for supporting mental health in the industry?]]> 2024-05-23T12:21:28+00:00 https://www.darkreading.com/cybersecurity-careers/persistent-burnout-is-still-a-crisis-in-cybersecurity www.secnews.physaphae.fr/article.php?IdArticle=8505433 False None None 3.0000000000000000 Dark Reading - Informationweek Branch One of China's biggest espionage operations owes its success to longstanding Microsoft Exchange bugs, open source tools, and old malware.]]> 2024-05-23T10:00:00+00:00 https://www.darkreading.com/threat-intelligence/china-apt-stole-geopolitical-secrets-from-middle-east-africa-and-asia www.secnews.physaphae.fr/article.php?IdArticle=8505338 False Malware,Tool None 3.0000000000000000 Dark Reading - Informationweek Branch Upgrade, an ARPA-H program, will focus on automating cybersecurity for healthcare institutions so that providers can focus on patient care.]]> 2024-05-22T20:04:10+00:00 https://www.darkreading.com/cybersecurity-operations/us-pumps-50m-into-better-healthcare-cyber-resilience www.secnews.physaphae.fr/article.php?IdArticle=8504967 False Medical None 3.0000000000000000 Dark Reading - Informationweek Branch The max-severity bug affects versions using the SAML single sign-on mechanism.]]> 2024-05-22T19:53:57+00:00 https://www.darkreading.com/vulnerabilities-threats/github-authentication-bypass-opens-enterprise-server-attackers www.secnews.physaphae.fr/article.php?IdArticle=8504968 False None None 3.0000000000000000 Dark Reading - Informationweek Branch Startups at Innovation Sandbox 2024 brought clarity to artificial intelligence, protecting data from AI, and accomplishing novel security solutions with new models.]]> 2024-05-22T17:00:00+00:00 https://www.darkreading.com/vulnerabilities-threats/trends-at-2024-rsa-startup-competition www.secnews.physaphae.fr/article.php?IdArticle=8504872 False None None 3.0000000000000000 Dark Reading - Informationweek Branch Coming on the heels of Cisco buying Splunk, Palo Alto Networks acquiring IBM's QRadar, and LogRhythm merging with Exabeam, Snowflake's investment highlights the ongoing market pressure to improve SOC tools.]]> 2024-05-22T15:53:10+00:00 https://www.darkreading.com/cybersecurity-analytics/snowflake-anvilogic-investment-sign-of-changes-siem www.secnews.physaphae.fr/article.php?IdArticle=8504969 False Tool None 3.0000000000000000 Dark Reading - Informationweek Branch The previously unknown malware (aka Hidden Shovel) is a ghost in the machine: It silently attacks kernel drivers to shut down security defense systems and thus evade detection.]]> 2024-05-22T14:11:54+00:00 https://www.darkreading.com/cyberattacks-data-breaches/novel-edr-killing-ghostengine-malware-stealth www.secnews.physaphae.fr/article.php?IdArticle=8504808 False Malware None 3.0000000000000000 Dark Reading - Informationweek Branch Federal and state regulators have introduced new rules and mandates aimed at holding organizations accountable when it comes to cybersecurity. Here's how to get ready.]]> 2024-05-22T14:00:00+00:00 https://www.darkreading.com/cybersecurity-operations/preparing-your-organization-upcoming-cybersecurity-deadlines www.secnews.physaphae.fr/article.php?IdArticle=8504769 False None None 3.0000000000000000 Dark Reading - Informationweek Branch Mandiant warns that defenders must rethink how to thwart Chinese cyber-espionage groups now using professional "infrastructure-as-a-service" operational relay box networks of virtual private servers as well as hijacked smart devices and routers.]]> 2024-05-22T14:00:00+00:00 https://www.darkreading.com/cybersecurity-operations/chinese-orb-networks-conceal-apts-make-tracking-iocs-irrelevant www.secnews.physaphae.fr/article.php?IdArticle=8504770 False None None 2.0000000000000000 Dark Reading - Informationweek Branch The severe security vulnerability (CVE-2024-4701, CVSS 9.9) gives remote attackers a way to burrow into Netflix's Genie open source platform, which is a treasure trove of information and connections to other internal services.]]> 2024-05-22T13:00:00+00:00 https://www.darkreading.com/application-security/netflix-fixes-critical-vulnerability-on-big-data-orchestration-service www.secnews.physaphae.fr/article.php?IdArticle=8504731 False Vulnerability None 2.0000000000000000 Dark Reading - Informationweek Branch AI safety platform startup WitnessAI claims to help enterprises use AI safely and effectively with its platform addressing AI privacy, governance, and security.]]> 2024-05-22T00:39:57+00:00 https://www.darkreading.com/cloud-security/witnessai-launches-with-guardrails-for-ai www.secnews.physaphae.fr/article.php?IdArticle=8504438 False None None 3.0000000000000000 Dark Reading - Informationweek Branch As a newly independent company, SAGE Cyber will offer a platform that helps CISOs make data-driven decisions and optimize their security defenses.]]> 2024-05-22T00:36:51+00:00 https://www.darkreading.com/cybersecurity-operations/sage-cyber-launches-ciso-planning-tool www.secnews.physaphae.fr/article.php?IdArticle=8504463 False Tool None 2.0000000000000000 Dark Reading - Informationweek Branch Scarred Manticore is the smart, sophisticated one. But when Iran needs something destroyed, it hands the keys over to Void Manticore.]]> 2024-05-21T20:47:21+00:00 https://www.darkreading.com/threat-intelligence/iran-apts-tag-team-espionage-wiper-attacks-against-israel-and-albania www.secnews.physaphae.fr/article.php?IdArticle=8504281 False None APT 34 2.0000000000000000 Dark Reading - Informationweek Branch Personalized phishing emails with fake collaboration opportunities and compromised video descriptions linking to malware are just some of the new tricks.]]> 2024-05-21T20:24:42+00:00 https://www.darkreading.com/vulnerabilities-threats/youtube-becomes-latest-frontier-for-phishing-deepfakes www.secnews.physaphae.fr/article.php?IdArticle=8504282 False Malware None 2.0000000000000000 Dark Reading - Informationweek Branch The agency plans to get more serious about enforcement as Iran and Russia step up the volume of cyberattacks on water systems nationwide.]]> 2024-05-21T17:29:45+00:00 https://www.darkreading.com/ics-ot-security/epa-water-sector-cyber-efforts www.secnews.physaphae.fr/article.php?IdArticle=8504197 False Legislation None 2.0000000000000000 Dark Reading - Informationweek Branch Feeling creative? Submit your caption and our panel of experts will reward the winner with a $25 Amazon gift card.]]> 2024-05-21T17:00:37+00:00 https://www.darkreading.com/cyberattacks-data-breaches/name-that-toon-buzz-kill www.secnews.physaphae.fr/article.php?IdArticle=8504165 False None None 2.0000000000000000 Dark Reading - Informationweek Branch Graph and streaming databases are helping defenders deal with complex, real-time threat and cybersecurity data to find weak points before attackers.]]> 2024-05-21T16:34:03+00:00 https://www.darkreading.com/cybersecurity-analytics/picking-right-database-tech-cybersecurity-defense www.secnews.physaphae.fr/article.php?IdArticle=8504411 False Threat None 3.0000000000000000 Dark Reading - Informationweek Branch Few enterprises have all the cybersecurity skills and resources they need in-house, making outsourcing a necessity. How do they select, and work with, third-party security service providers?]]> 2024-05-21T16:04:39+00:00 https://www.darkreading.com/cybersecurity-operations/outsourcing-security-without-increasing-risk www.secnews.physaphae.fr/article.php?IdArticle=8504543 False None None 2.0000000000000000 Dark Reading - Informationweek Branch A threat campaign luring users with malicious documents related to human rights and public notices is aimed at giving the Russia-backed threat group access to victims' systems for cyber-espionage purposes.]]> 2024-05-21T14:43:37+00:00 https://www.darkreading.com/cyberattacks-data-breaches/russia-turla-apt-msbuild-tinyturla-backdoor www.secnews.physaphae.fr/article.php?IdArticle=8504106 False Threat None 3.0000000000000000 Dark Reading - Informationweek Branch As we face continued headwinds on provisions like data flows and e-customs duties, further progress is both needed and achievable in digital trade policy.]]> 2024-05-21T14:00:00+00:00 https://www.darkreading.com/cybersecurity-operations/can-cybersecurity-be-unifying-factor-in-digital-trade-negotiations- www.secnews.physaphae.fr/article.php?IdArticle=8504066 False None None 2.0000000000000000 Dark Reading - Informationweek Branch The Siren email mailing list will focus on operational impact and response and act as a central location to provide information about threats and necessary post-disclosure activities.]]> 2024-05-21T00:52:11+00:00 https://www.darkreading.com/application-security/openssf-siren-to-share-threat-intelligence-for-open-source-software www.secnews.physaphae.fr/article.php?IdArticle=8503996 False Threat None 3.0000000000000000 Dark Reading - Informationweek Branch Fraudsters based in the US and Europe indicted for helping North Korea's nation-state groups establish fake freelancer identities and evade sanctions.]]> 2024-05-21T00:00:00+00:00 https://www.darkreading.com/vulnerabilities-threats/doj-targets-north-koreas-widespread-it-freelance-scam-operation www.secnews.physaphae.fr/article.php?IdArticle=8503699 False None None 3.0000000000000000 Dark Reading - Informationweek Branch The new Secure Alternative Program from Google aims to entice customers away from Exchange Online and break Microsoft's dominance in enterprise.]]> 2024-05-20T22:14:45+00:00 https://www.darkreading.com/application-security/google-pitches-workspace-as-more-secure-option-to-microsoft-email-citing-csrb-report www.secnews.physaphae.fr/article.php?IdArticle=8503675 False None None 3.0000000000000000 Dark Reading - Informationweek Branch Faced with chilling new SEC rules, chief information security officers are learning soft skills to help them better communicate cybersecurity concerns with the C-suite.]]> 2024-05-20T22:08:04+00:00 https://www.darkreading.com/cyber-risk/transforming-cisos-into-storytellers www.secnews.physaphae.fr/article.php?IdArticle=8504029 False None None 2.0000000000000000 Dark Reading - Informationweek Branch The acquisition gives CyberArk new IoT identity and certificate lifecycle management, cryptographic code-signing, and other services to secure the enterprise cloud.]]> 2024-05-20T20:59:10+00:00 https://www.darkreading.com/cloud-security/cyberark-picks-up-machine-id-manager-venafi-for-1-54b www.secnews.physaphae.fr/article.php?IdArticle=8503624 False Cloud None 2.0000000000000000 Dark Reading - Informationweek Branch 2024-05-20T20:20:30+00:00 https://www.darkreading.com/vulnerabilities-threats/hp-catches-cybercriminals-cat-phishing-users www.secnews.physaphae.fr/article.php?IdArticle=8503625 False None None 3.0000000000000000 Dark Reading - Informationweek Branch 2024-05-20T20:12:10+00:00 https://www.darkreading.com/cyberattacks-data-breaches/data-breach-response-provider-cyex-acquires-settlement-administrator-simpluris-inc- www.secnews.physaphae.fr/article.php?IdArticle=8503626 False Data Breach None 2.0000000000000000 Dark Reading - Informationweek Branch 2024-05-20T20:06:36+00:00 https://www.darkreading.com/cyberattacks-data-breaches/deepfakes-rank-as-the-second-most-common-cybersecurity-incident-for-us-businesses www.secnews.physaphae.fr/article.php?IdArticle=8503584 False None None 3.0000000000000000 Dark Reading - Informationweek Branch 2024-05-20T20:01:24+00:00 https://www.darkreading.com/cyber-risk/zerorisk-cybersecurity-expands-global-presence-with-us-launch www.secnews.physaphae.fr/article.php?IdArticle=8503585 False None None 2.0000000000000000 Dark Reading - Informationweek Branch 2024-05-20T19:51:11+00:00 https://www.darkreading.com/ics-ot-security/nreca-receives-4m-in-doe-funding-to-boost-electric-co-op-cybersecurity-preparedness www.secnews.physaphae.fr/article.php?IdArticle=8503586 False None None 2.0000000000000000 Dark Reading - Informationweek Branch An on-by-default endpoint in ubiquitous logging service Fluent Bit contains an oversight that hackers can toy with to rattle most any cloud environment.]]> 2024-05-20T19:31:25+00:00 https://www.darkreading.com/cloud-security/critical-bug-dos-rce-data-leaks-in-all-major-cloud-platforms www.secnews.physaphae.fr/article.php?IdArticle=8503587 False Cloud None 3.0000000000000000 Dark Reading - Informationweek Branch UCSC students say that after reporting the bug months ago they're still able to rack up unlimited free wash loads at their local laundromat.]]> 2024-05-20T19:03:41+00:00 https://www.darkreading.com/ics-ot-security/students-spot-washing-machine-app-flaw-that-gives-out-free-cycles www.secnews.physaphae.fr/article.php?IdArticle=8503588 False None None 2.0000000000000000 Dark Reading - Informationweek Branch As the US braces for a data privacy overhaul, companies need to update data practices, train staff, and ensuring compliance from the outset to avoid Europe's costly missteps.]]> 2024-05-20T14:17:05+00:00 https://www.darkreading.com/cyber-risk/what-american-enterprises-can-learn-from-europe-gdpr-mistakes www.secnews.physaphae.fr/article.php?IdArticle=8503449 False None None 3.0000000000000000 Dark Reading - Informationweek Branch Antidot uses overlay attacks and keylogging to target users' financial data.]]> 2024-05-20T13:00:00+00:00 https://www.darkreading.com/endpoint-security/android-banking-trojan-antidot-disguised-as-google-play-update www.secnews.physaphae.fr/article.php?IdArticle=8503376 False Mobile None 3.0000000000000000 Dark Reading - Informationweek Branch Our collection of the most relevant reporting and industry perspectives for those guiding cybersecurity strategies and focused on SecOps. Also included: DR's podcast on the CISO & the SEC; breaking down CISA's Secure by Design Pledge; Singapore puts cloud providers on notice.]]> 2024-05-17T21:13:03+00:00 https://www.darkreading.com/cybersecurity-operations/ciso-corner-cyber-labor-shortage-trouble-meeting-sec-disclosure-deadlines www.secnews.physaphae.fr/article.php?IdArticle=8501876 False Cloud None 3.0000000000000000 Dark Reading - Informationweek Branch IBM's abrupt divestiture of QRadar SaaS underscores the consolidation of SIEM, XDR, and AI technologies into unified platforms.]]> 2024-05-17T21:00:38+00:00 https://www.darkreading.com/cybersecurity-analytics/ciso-grapple-with-ibm-unexpected-cybersecurity-software-exit www.secnews.physaphae.fr/article.php?IdArticle=8501904 False Cloud None 3.0000000000000000