Crooked Bough News Round-up

— Top Tech Talent Warns of AI's Threat to Human Existence in Open Letter

 

at 3/29/23 3:24pm

Elon Musk, Steve Wozniak, and Andrew Yang are among more than 1,000 tech leaders asking for time to establish human safety parameters around AI.

[Link to media]

— Top Tech Talent Warns on AI's Threat to Human Existence in Open Letter

 

at 3/29/23 3:24pm

Musk, Wozniak, and Yang are among more than a thousand tech leaders asking for time to establish human safety parameters around AI.

[Link to media]

— Trojan-Rigged Tor Browser Bundle Drops Malware

 

at 3/29/23 2:31pm

Attackers are targeting cryptocurrency accounts belonging to users in Russia and more than 50 other countries.

[Link to media]

— Patch Now: Cybercriminals Set Sights on Critical IBM File Transfer Bug

 

at 3/29/23 2:25pm

A vulnerability with a 9.8 CVSS rating in IBM's widely deployed Aspera Faspex offering is being actively exploited to compromise enterprises.

[Link to media]

— Phishing Emails Up a Whopping 569% in 2022

 

at 3/29/23 1:05pm

Credential phishing emails are the clear favorite of threat actors, with a 478% spike last year, new research shows.

[Link to media]

— Cybersecurity Investment Outlook Remains Grim as Funding Activity Sharply Declines

 

at 3/29/23 12:37pm

Security analysts expect little improvement until at least the second half of the year.

[Link to media]

— Cybersecurity Investment and M&A Activity Slowed in Q1, 2023

 

at 3/29/23 12:37pm

Security analysts expect little improvement until at least the second half of the year.

[Link to media]

— Using Observability to Power a Smarter Cybersecurity Strategy

 

at 3/29/23 11:00am

With an infrastructure for observability, security teams can make better decisions about access and identity-based threats.

[Link to media]

— Google: Commercial Spyware Used by Governments Laden With Zero-Day Exploits

 

at 3/29/23 10:53am

Google TAG researchers reveal two campaigns against iOS, Android, and Chrome users that demonstrate how the commercial surveillance market is thriving despite government-imposed limits.

[Link to media]

— The CISO Mantra: Get Ready to Do More With Less

 

at 3/29/23 8:00am

For the foreseeable future, with the spigots closing shut, CISOs will need to find ways to do more with less.

[Link to media]

— How Does Data Literacy Enhance Data Security?

 

at 3/28/23 6:17pm

With the rise in cloud-based security concerns and other issues, organizations must improve data literacy across the enterprise.

[Link to media]

— Microsoft Security Copilot Uses GPT-4 to Beef Up Security Incident Response

 

at 3/28/23 6:00pm

Microsoft's new AI assistant tool helps cybersecurity teams investigate security incidents and hunt for threats.

[Link to media]

— MacStealer Malware Plucks Bushels of Data From Apple Users

 

at 3/28/23 3:00pm

A novel cyber threat against macOS users is being sold for $100 a pop on the Dark Web, and activity is ramping up.

[Link to media]

— NullMixer Polymorphic Malware Variant Infects 8K Targets in Just a Month

 

at 3/28/23 2:41pm

The NullMixer loader has compromised thousands of endpoints in the US, France, and Italy, stealing data and selling it to Dark Web data dealers, all without setting off alarm bells.

[Link to media]

— Millions of Pen Tests Show Companies' Security Postures Are Getting Worse

 

at 3/28/23 2:24pm

A lack of website protections, Sender Policy Framework (SPF) records, and DNSSEC configurations leave companies open to phishing and data exfiltration attacks.

[Link to media]

— Bitwarden Announces Secrets Management With a Combination of Open Source, End-to-End Encryption, and Ease of Use

 

at 3/28/23 1:16pm

No more information available.

— North Korea's Kimsuky Evolves into Full-Fledged, Prolific APT43

 

at 3/28/23 11:05am

In cyberattacks against the US, South Korea, and Japan, the group (aka APT43 or Thallium) is using advanced social engineering and cryptomining tactics that set it apart from other threat actors.

[Link to media]

— Hey, Siri: Hackers Can Control Smart Devices Using Inaudible Sounds

 

at 3/28/23 9:54am

A technique, dubbed the "Near-Ultrasound Inaudible Trojan" (NUIT), allows an attacker to exploit smartphones and smart speakers over the Internet, using sounds undetectable by humans.

[Link to media]

— Spend on Safety Measures & Call Out Insecure Practices for Safer IoT

 

at 3/28/23 8:00am

IoT risk and security must get more attention from vendors and support from the marketplace.

[Link to media]

— How CISOs Can Reduce the Danger of Using Data Brokers

 

at 3/27/23 8:31pm

Without proof that it was collected legally, purchased data can threaten an enterprise's security compliance and even expose the company to litigation.

[Link to media]

— CISA Releases Hunt Tool for Microsoft's Cloud Services

 

at 3/27/23 6:00pm

CISA released the hunt and response tool to help defenders extract cloud artifacts without performing additional analytics.

[Link to media]

As of 3/29/23 5:10pm. Last new 3/29/23 5:10pm.