Security

Dark Reading:

  • China-Backed Hackers Backdoor US Carrier-Grade Juniper MX Routers
    by Rob Wright
    Mandiant researchers found the routers of several unnamed organizations (likely telcos and ISPs) were hacked by UNC3886, and contained a custom backdoor called "TinyShell."
  • NIST Finalizes Differential Privacy Rules to Protect Data
    by Arielle Waldman
    The National Institute of Standards and Technology (NIST) has released updated differential privacy guidelines for organizations to follow to protect personally identifiable information when sharing data.
  • Apple Drops Another WebKit Zero-Day Bug
    by Jai Vijayan, Contributing Writer
    A threat actor leveraged the vulnerability in an "extremely sophisticated" attack on targeted iOS users, the company says.
  • Volt Typhoon Strikes Massachusetts Power Utility
    by Elizabeth Montalbano, Contributing Writer
    The prolonged attack, which lasted 300+ days, is the first known compromise of the US electric grid by the Voltzite subgroup of the Chinese APT; during it, the APT attempted to exfiltrate critical OT infrastructure data.
  • 'Ballista' Botnet Exploits 2023 Vulnerability in TP-Link Routers
    by Kristina Beek, Associate Editor, Dark Reading
    In the past, the vulnerability was exploited to drop Mirai botnet malware. Today, it's being used once more for another botnet campaign with its own malware.
  • The CISO as Business Resilience Architect
    by Randolph Barr
    To truly become indispensable in the boardroom, CISOs need to meet the dual demands of defending against sophisticated adversaries while leading resilience strategies.