New Malware Hidden in Apple IDE Targets macOS Developers

[TechWeb]( Follow Dark Reading: [RSS]( March 22, 2021 LATEST SECURITY NEWS & COMMENTARY [New Malware Hidden in Apple IDE Targets macOS Developers]( XcodeSpy is latest example of growing attacks on software supply chain. [Verkada Attacker Charged With Wire Fraud, Conspiracy in US]( Swiss national Till Kottmann and co-conspirators are accused of breaking into dozens of US companies and government entities. [How Us Shady Geeks Put Others Off Security]( Early adopters of security and privacy tools may be perceived by others as paranoid, which, in turn, may repel non-experts from protecting themselves online. [SolarWinds-Linked Attackers Target Microsoft 365 Mailboxes]( Researchers observe attackers altering mailbox folders to assign read-only permissions to any authenticated user on a target machine. [Russian Man Pleads Guilty in Thwarted Tesla Hack]( Egor Kriuchkov will be sentenced in May on conspiracy charge [MORE NEWS & COMMENTARY]( HOT TOPICS [Ransom Payments Have Nearly Tripled]( In 2020, ransomware targeted the manufacturing sector, healthcare organizations, and construction companies, with the average ransom reaching $312,000, a report finds. [Beware the Package Typosquatting Supply Chain Attack]( Attackers are mimicking the names of existing packages on public registries in hopes that users or developers will accidentally download these malicious packages instead of legitimate ones. [Metasploit Creator HD Moore's New Startup Raises $5M]( Startup Rumble enters major new phase with venture capital investment led by Cisco-backed fund as well as big-name security entrepreneurs. [MORE]( EDITORS' CHOICE [7 Tips to Secure the Enterprise Against Tax Scams]( Tax season is yet another opportunity for fraudsters to target your company. Here's how to keep everyone in the organization on their toes. [How to Choose the Right Cybersecurity Framework]( Cybersecurity frameworks can help reduce your risk of supply chain attacks and increase your competitive advantage. LATEST FROM THE EDGE [Contemplating the Coffee Supply Chain: A Horror Story]( On the bean-to-cup journey, dangers await around every corner. Here, well-caffeinated security experts warn the coffee industry about the threats. Tech Resources - [Threat Reconnaissance Lessons from the Private Sector for Federal & State Agencies]( - [2021 Application Security Statistics Report Vol.2]( - [10 Must-Have Capabilities for Stopping Malicious Automation Checklist]( - [Improve MITRE ATT&CK Test Results for Endpoint Security Using Deception]( - [The Ultimate Cyber Skills Strategy Cheat Sheet]( - [Red Team Operation Bullseye]( - [An Executive's Guide to Budgeting for Managed Threat Detection and Response]( [ACCESS TECH LIBRARY NOW]( - [Understanding XDR - April 8 FREE Webinar]( In this webinar, experts discuss the benefits and limitations of EDR, and offer recommendations on how to extend these capabilities to other parts of the IT infrastructure in order to improve overall security. - [Detecting & Mitigating Attacks on Remote Workers]( In this webinar, experts discuss some of the cyber attacks that have been made on work-from-home end users, as well as exploits against remote systems and devices. [MORE WEBINARS]( FEATURED REPORTS - [Building an Effective Cybersecurity Incident Response Team]( - [Protection Strategies for a Cyber-Resilient Organization]( [MORE REPORTS]( CURRENT ISSUE [2021 Top Enterprise IT Trends]( [DOWNLOAD THIS ISSUE]( [SUBSCRIBE NOW]( [BACK ISSUES]( | [MUST READS]( | [TECH DIGEST]( PRODUCTS & RELEASES [Core Security Announces Results of Second Annual Penetration Testing Survey]( [Netsurion Announces Enhanced Partner Program Benefits]( [Forrester: Despite COVID-19 Vaccine Deployment Underway, Employers Must Exercise Caution as They Plan to Reopen Physical Offices]( [Pindrop Acquires Next Caller]( [MORE PRODUCTS & RELEASES]( Dark Reading Daily -- Published By [Dark Reading]( Informa Tech 303 Second St., Suite 900 South Tower, San Francisco, CA 94107 To update your profile, change your e-mail address, or unsubscribe, [click here.]( To opt-out of any future Dark Reading Daily Newsletter emails, please respond [here.]( Thoughts about this newsletter? [Give us feedback.](mailto:customerservice_informationhub@techweb.com) Keep This Newsletter Out Of Your SPAM Folder Don't let future editions go missing. Take a moment to add the newsletter's address to your anti-spam white list: If you're not sure how to do that, ask your administrator or ISP. Or check your anti-spam utility's documentation. We take your privacy very seriously. Please review our [Privacy Statement.]( [© 2021]( | [Informa Tech]( | [Privacy Statement]( | [Terms & Conditions]( | [Contact Us](mailto:customerservice_informationhub@techweb.com)