Dark Reading

GISEC GLOBAL is an international event focused on global security and technology innovations.

The 'GodDamn' ransomware uses BYOVD to target US companies by deploying a malicious kernel driver co-signed by Microsoft, which disables security software during attacks.

A survey reveals European organizations' security leaders have an overestimated sense of safety concerning their collaboration tools and platforms, highlighting a confidence gap in collaboration security.

Mexico's new cybersecurity plan, currently in the expansion phase, is undergoing its first major test during the FIFA World Cup. The plan must successfully navigate this critical period to prove its effectiveness.

Estonia plans to use AI agents for government purposes, positioning itself as a digital testing ground. The initiative aims to set a precedent for state-issued IDs for AI agents.

Attackers are exploiting a memory disclosure flaw in Citrix's NetScaler products shortly after researchers published a proof-of-concept (PoC) exploit. The vulnerability, referred to as 'CitrixBleed', is under active attack.

Chinese firms have released two new large language models (LLMs) that rival top US models. The advancement may widen the gap between cyber attackers and defenders, raising concerns for cybersecurity professionals.

Australian individuals face a reduced cybercrime risk due to improved institutional safeguards and stricter regulations. However, the burden of protection and risk reduction has shifted to small and medium-sized businesses (SMBs).

A China-linked group targeted critical systems in Southeast Asia, compromising at least 10 regional organizations, including two state-owned entities, and deploying a new backdoor.

A critical vulnerability discovered by a researcher could have allowed unauthorized access to a national government portal in India, exposing private data through vulnerabilities in government systems.

The Russian state-sponsored APT group Gamaredon has enhanced its capabilities by improving malware deployment and server concealment techniques. This upgrade necessitates the development of new defensive strategies to counter their activities.

The EU is developing 6G network security through the 'Shield-6G' initiative, which integrates AI threat detection, digital twins, and honeypots to protect against future threats. This project aims to help carriers secure 6G networks against emerging risks.

The UK will implement a ban on adolescents under 16 from user-to-user social-media platforms. Privacy experts and age-verification challenges are highlighted as key concerns.

Security experts signed an open letter urging the government to reverse export restrictions on Anthropic's Claude Fable 5 and Mythos 5 models. The letter criticizes the US ban on exporting these AI models.

ShinyHunters exploited a zero-day vulnerability in Oracle's ERP software to steal data from American universities. The attack took advantage of a critical bug that disproportionately impacted higher education institutions.

Phishing attack volume has decreased by 20%, but hackers are prioritizing quality over quantity by using AI to enhance their attacks. Despite fewer attempts, the risk remains elevated due to more sophisticated methods.

North Korea's GDP growth is partially attributed to cybercrime gains from groups linked to the nation, which target business and financial firms. The article highlights the role of cybercriminal activities in boosting the country's economy.

Bug bounty research inadvertently led organizations to believe they were being breached through their ServiceNow instances. The research triggered a security alert related to ServiceNow.

Patch Tuesday saw a record 206 CVEs addressed, with artificial intelligence accelerating vulnerability discovery and potentially leading to more frequent large-scale patch updates.

A flaw in Microsoft Exchange, dubbed 'Ghost-Sender', allows attackers to spoof any email address by exploiting Exchange Online or on-premises systems in hybrid mode with third-party mail servers or spam filters.