Dark Reading

The accord covers initiatives to create more transparency regarding what tech firms like Meta, Microsoft, Google, TikTok, and OpenAI are doing to combat malicious AI, especially around elections.

“Voltzite,” the APT’s subset that focuses on OT networks and critical infrastructure, has also compromised targets in Africa.

Southeast Asia is learning the hard way that biometric scans are nearly as easy to bypass as other kinds of authentication data, thanks to a creative banking Trojan.

It’s unclear what kind of cyberattack VARTA AG is facing, but it has shut down its systems until it can become operational again.

Microsoft has observed signs of active exploits targeting CVE-2024-2140.

CISA’s recently introduced framework for hardware bill of materials is an important step in addressing semiconductor risks. But further tracking beyond manufacturing is critical to its usefulness.

The feds disrupted a Russian intelligence SOHO router botnet notable for being built with Moobot malware rather than custom code.

The industry is evolving from one of conventional threat detection toward a strategy that emphasizes context and preempts user behavior.

Using a custom Python script to send bulk phishing messages with a USPS lure, the cyberattackers are posing a risk to consumer-facing organizations moving workloads to the cloud.

Boards of directors don’t care about the minute technical details of the security program. They want to see how key performance indicators are tracked and utilized.