98 Patches: Microsoft Greets New Year With Zero-Day Security Fixes

Microsoft's January 2023 Patch Tuesday security update contains fixes for bugs in multiple products. Here's what you need to patch now. [TechWeb]( Follow Dark Reading: [RSS]( January 11, 2023 LATEST SECURITY NEWS & COMMENTARY [98 Patches: Microsoft Greets New Year With Zero-Day Security Fixes]( Microsoft's January 2023 Patch Tuesday security update contains fixes for bugs in multiple products. Here's what you need to patch now. [Microsoft: Kinsing Targets Kubernetes via Containers, PostgreSQL]( The cryptomining malware, which typically targets Linux, is exploiting weaknesses in an open source container tool for initial access to cloud environments. [Quantum Decryption Breakthrough? Not So Fast]( A paper by two dozen Chinese researchers maintains that near-future quantum computers could crack RSA-2048 encryption, but experts call the claims misleading. [Black Hat Flashback: The Deadly Consequences of Weak Medical Device Security]( Hacking to kill: Dark Reading's Fahmida Y. Rashid reflects on the monumental Black Hat 2011 moment when Jay Radcliffe showed how to hack his insulin pump. [Preparing for the Effects of Quantum-Centric Supercomputing]( While it has been a perennial forecast that efficient universal quantum computers are “a decade away,” that prospect now seems a legitimate possibility. Organizations need to get ready now. [SCOTUS OKs WhatsApp Suit Against NSO Group]( Supreme Court rules WhatsApp can sue NSO Group for damages caused by unauthorized Pegasus spyware installations. [San Fran's BART Investigates Vice Society Data Breach Claims]( Vice Society is boasting that it compromised the San Francisco transportation system, while BART maintains operations and mounts an investigation. [MORE NEWS /]( [MORE COMMENTARY]( HOT TOPICS [In Memoriam: Remembering Those Who Passed]( Security stands on the shoulders of giants. We take a moment to remember their contributions toward keeping people, data, and systems safe. [Web 3.0 Shifts Attack Surface and Highlights Need for Continuous Security]( A model of continuous authentication and identification is needed to keep consumers safe. [Rackspace Ransomware Incident Highlights Risks of Relying on Mitigation Alone]( Organizations often defer patching because of business disruption fears — but that didn't work out very well for Rackspace's Hosted Exchange service. [MORE]( EDITORS' CHOICE [Attackers Are Already Exploiting ChatGPT to Write Malicious Code]( The AI-based chatbot is allowing bad actors with absolutely no coding experience to develop malware. LATEST FROM THE EDGE [Security Planning: Ask What Could Go Wrong]( Are you asking the right questions about potential scenarios when thinking about disaster recovery and business continuity? LATEST FROM DR TECHNOLOGY [Intel's New Xeon Chip Pushes Confidential Computing to the Cloud]( After a delay of more than a year, Intel's on-chip confidential computing feature is coming to all the major cloud providers, starting with Microsoft's Azure. WEBINARS - [Every DDoS Resilience and Response Playbook Should Include These Things]( Cyber attackers can level organizations with a distributed denial-of-service (DDoS) attack. How do security teams keep stakeholders informed when services are down? Who do they call to remediate the incident and make sure the attackers don't knock everything down again? ... - [Detecting, Analyzing, and Mitigating Targeted Attacks]( For many security professionals, the nightmare scenario keeping them awake at night is a sophisticated, targeted attack aimed directly at their own organization and its specific defenses. In this webinar, experts describe the type of tools and processes necessary to ... [View More Dark Reading Webinars >>]( WHITE PAPERS - [How Machine Learning, AI & Deep Learning Improve Cybersecurity]( - [State of Email Security]( - [Ransomware Resilience and Response: The Next-Generation]( - [Ransomware Is On The Rise]( - [State of Ransomware Readiness: Facing the Reality Gap]( - [How Hybrid Work Fuels Ransomware Attacks]( [View More White Papers >>]( FEATURED REPORTS - [10 Hot Talks From Black Hat USA 2022]( Black Hat USA brings together cutting-edge research, new security tools, and sophisticated defensive techniques over the course of two days. There were some recurring themes across the sessions, and many of these topics are going to be important issues to ... - [The Promise and Reality of Cloud Security]( Cloud security has been part of the cybersecurity conversation for years but has been on the sidelines for most enterprises. The shift to remote work during the COVID-19 pandemic and digital transformation projects have moved cloud infrastructure front-and-center as enterprises ... - [How Machine Learning, AI & Deep Learning Improve Cybersecurity]( [View More Dark Reading Reports >>]( PRODUCTS & RELEASES [Bay Bridge Administrators, LLC Notifies Individuals of Data Breach]( [Cerberus Sentinel to Acquire RAN Security]( [Vade Releases Advanced Threat Intel & Investigation Capabilities]( [Netskope Threat Research: Malware-Delivering Cloud Apps Nearly Tripled in 2022]( [65% of Organizations Plan to Adopt a Security Service Edge Platform in Next 2 Years: Axis Security]( [NetSPI Acquires nVisium]( [Moving Analytics Launches Single Sign on to Strengthen Data Security and Improve User Experience]( [Delinea 2022 State of Ransomware Report Reveals That Attacks Are Down 61% From the Previous Year, and Ransom Payments Are Also on the Decline]( [MORE PRODUCTS & RELEASES]( CURRENT ISSUE [The Promise and Reality of Cloud Security]( [DOWNLOAD THIS ISSUE]( [VIEW BACK ISSUES]( Dark Reading Daily -- Published By [Dark Reading]( Informa Tech Holdings LLC | Registered in the United States with number 7418737 | 605 Third Ave., 22nd Floor, New York, New York 10158, USA To opt-out of any future Dark Reading Daily Newsletter emails, please respond [here.]( Thoughts about this newsletter? [Give us feedback.](mailto:ContactDarkReading@informa.com) Keep This Newsletter Out Of Your SPAM Folder Don't let future editions go missing. Take a moment to add the newsletter's address to your anti-spam white list: If you're not sure how to do that, ask your administrator or ISP. Or check your anti-spam utility's documentation. We take your privacy very seriously. Please review our [Privacy Statement.]( [© 2023]( | [Informa Tech]( | [Privacy Statement]( | [Terms & Conditions]( | [Contact Us](mailto:ContactDarkReading@informa.com)