With access to SIM, location data, and a preview of recent SMSes, attackers have everything they need for account takeover or targeted social engineering. Source: https://www.darkreading.com/threat-intelligence/zerodayrat-brings-commercial-spyware-to-mass-market

Organizations that have exposed their instances of Web Help Desk to the public Internet have inadvertently made them prime targets for attackers. Source: https://www.darkreading.com/vulnerabilities-threats/solarwinds-whd-attacks-exposed-apps

Only Taiwan made the top 10 list of governments, effectively blocking the threat-ridden protocol, but overall, the region lagged in curbing Telnet traffic. Source: https://www.darkreading.com/threat-intelligence/asia-fumbles-telnet-threat-traffic

Organizations can improve their climate footprints by optimizing two specific cybersecurity protections, without incurring added risks. Source: https://www.darkreading.com/application-security/cyber-industry-defenses-co2-emissions

Organizations remain reluctant to address the fact that AI can dangerously expose business operations as well as personal data. Source: https://www.darkreading.com/data-privacy/do-we-know-enough-about-data-populating-ai

How a platform engineering team embeds supply chain security into infrastructure without slowing developers. Source: https://www.darkreading.com/application-security/automaker-secures-supply-chain-developer-friendly-platform

CISOs should focus on harnessing and securing AI and building new skills among their people. Vision and change management can transform security. Source: https://www.darkreading.com/cybersecurity-operations/stay-top-future-threats-cutting-edge-soc

In moving away from traditional banks to focus on Web3 companies, the threat actor is leveraging LLMs, deepfakes, legitimate platforms, and ClickFix. Source: https://www.darkreading.com/threat-intelligence/north-koreas-unc1069-hammers-crypto-firms

Green Blood Group steals personal records and biometric data of the West African nation’s nearly 20 million residents. Source: https://www.darkreading.com/cyberattacks-data-breaches/hackers-breach-senegal-national-biometric-database

Microsoft uncovered AI recommendation poisoning in 31 companies across 14 industries, and turnkey tools make it trivially easy to pull off. Source: https://www.darkreading.com/cyber-risk/summarize-ai-buttons-may-be-lying

Men should take extra care on Valentine’s Day because they are nearly twice as likely as women to fall victim to romance scams. Source: https://www.darkreading.com/cyber-risk/one-in-two-americans-romance-scam-incidents

Drawing on years of adversary tradecraft, SpecterOps experts work alongside customers to analyze and eliminate attack paths, protect critical assets, and stay ahead of emerging threats. Source: https://www.darkreading.com/identity-access-management-security/specterops-launches-bloodhound-scentry

The AI-powered product delivers expert-grade malware analysis and reverse engineering in minutes. Source: https://www.darkreading.com/endpoint-security/booz-allen-announces-general-availability-vellox-reverser

It’s time to phase out the "patch and pray" approach, eliminate needless public interfaces, and enforce authentication controls, one expert says. Source: https://www.darkreading.com/endpoint-security/ivanti-epmm-zero-day-bugs-exploit

As AI deployments scale and start to include packs of agents autonomously working in concert, organizations face a naturally amplified attack surface. Source: https://www.darkreading.com/cloud-security/ai-agents-swarm-security-complexity

Espionage groups from China, Russia and other nations burned at least two dozen zero-days in edge devices in attempts to infiltrate defense contractors’ networks. Source: https://www.darkreading.com/cyber-risk/nation-state-hackers-defense-industrial-base-under-siege

Threat actors are exploiting security gaps to weaponize Windows drivers and terminate security processes in targeted networks, and there may be no easy fixes in sight. Source: https://www.darkreading.com/application-security/microsoft-under-pressure-defenses-byovd-attacks

Zscaler’s acquisition of SquareX comes as competitors like CrowdStrike and Palo Alto Networks also invest in secure browser technologies. Source: https://www.darkreading.com/remote-workforce/zscaler-squarex-deal-boosts-zero-trust-secure-browsing-capabilities

30 copycat apps tricked users, and Google itself, into thinking they’re legitimate AI tools. Source: https://www.darkreading.com/cyber-risk/chrome-fake-ai-browser-extensions

The GS7 cyber-threat group targets US financial institutions with near-perfect imitations of corporate portals to steal credentials and gain remote access. Source: https://www.darkreading.com/cyberattacks-data-breaches/operation-doppelbrand-weaponizing-fortune-500-brands