Elon Musk, Steve Wozniak, and Andrew Yang are among more than 1,000 tech leaders asking for time to establish human safety parameters around AI. [TechWeb]( Follow Dark Reading:
[RSS](
March 30, 2023 LATEST SECURITY NEWS & COMMENTARY [Top Tech Talent Warns of AI's Threat to Human Existence in Open Letter](
Elon Musk, Steve Wozniak, and Andrew Yang are among more than 1,000 tech leaders asking for time to establish human safety parameters around AI.
[Trojan-Rigged Tor Browser Bundle Drops Malware](
Attackers are targeting cryptocurrency accounts belonging to users in Russia and more than 50 other countries.
[Patch Now: Cybercriminals Set Sights on Critical IBM File Transfer Bug](
A vulnerability with a 9.8 CVSS rating in IBM's widely deployed Aspera Faspex offering is being actively exploited to compromise enterprises.
[Google: Commercial Spyware Used by Governments Laden With Zero-Day Exploits](
Google TAG researchers reveal two campaigns against iOS, Android, and Chrome users that demonstrate how the commercial surveillance market is thriving despite government-imposed limits.
[Cybersecurity Investment Outlook Remains Grim as Funding Activity Sharply Declines](
Security analysts expect little improvement until at least the second half of the year.
[Phishing Emails Up a Whopping 569% in 2022](
Credential phishing emails are the clear favorite of threat actors, with a 478% spike last year, new research shows.
[Spera Takes Aim at Identity Security Posture Management](
ISPM is a combination of identity attack surface management, and risk reduction, as well as identity threat prevention, detection, and response.
[The CISO Mantra: Get Ready to Do More With Less](
For the foreseeable future, with the spigots closing shut, CISOs will need to find ways to do more with less.
[Using Observability to Power a Smarter Cybersecurity Strategy](
With an infrastructure for observability, security teams can make better decisions about access and identity-based threats. [MORE NEWS /]( [MORE COMMENTARY]( HOT TOPICS [Hey, Siri: Hackers Can Control Smart Devices Using Inaudible Sounds]( A technique, dubbed the "Near-Ultrasound Inaudible Trojan" (NUIT), allows an attacker to exploit smartphones and smart speakers over the Internet, using sounds undetectable by humans.
[North Korea's Kimsuky Evolves into Full-Fledged, Prolific APT43]( In cyberattacks against the US, South Korea, and Japan, the group (aka APT43 or Thallium) is using advanced social engineering and cryptomining tactics that set it apart from other threat actors.
[Spend on Safety Measures & Call Out Insecure Practices for Safer IoT]( IoT risk and security must get more attention from vendors and support from the marketplace. [MORE]( EDITORS' CHOICE [Millions of Pen Tests Show Companies' Security Postures Are Getting Worse](
A lack of website protections, Sender Policy Framework (SPF) records, and DNSSEC configurations leave companies open to phishing and data exfiltration attacks. LATEST FROM THE EDGE [How Does Data Literacy Enhance Data Security?](
With the rise in cloud-based security concerns and other issues, organizations must improve data literacy across the enterprise. LATEST FROM DR TECHNOLOGY [Microsoft Security Copilot Uses GPT-4 to Beef Up Security Incident Response](
Microsoft's new AI assistant tool helps cybersecurity teams investigate security incidents and hunt for threats. WEBINARS - [How Supply Chain Attacks Work -- And What You Can Do to Stop Them]( Supply chain attacks made headlines in 2022, sending shockwaves through the industry as security and business leaders scrambled to reexamine the security of their own supply chains. In this webinar, experts talk through the stages of a supply chain attack and ... - [Expert Advice for Getting the Most from Security Orchestration, Automaton & Response Enterprise Tools]( Over the past few years, many enterprises have been improving cybersecurity by implementing the Security Orchestration, Automation, and Response (SOAR) framework, which provides a path to collect threat data from multiple sources and respond to some security events automatically. How ... [View More Dark Reading Webinars >>]( WHITE PAPERS - [Evaluator's Guide for Managed Detection and Response (MDR) Services](
- [How to Simplify Security with a Cybersecurity Mesh Architecture](
- [Empower Digital Transformation by Protecting Converged IT and OT](
- [Cloud Journey Adoption Stage: Securing Hybrid and Multi-cloud Environments](
- [Cloud Journey Migration Stage: Adaptive Cloud Security](
- [Cloud Journey Consideration Stage: 2022 Cloud Security Report](
- [State of Enterprise Cybersecurity: Invest Now, or Pay Big Later]( [View More White Papers >>]( FEATURED REPORTS - [Shoring Up the Software Supply Chain Across Enterprise Applications]( Supply chain security attacks are growing at an alarming pace, and things are going to keep getting worse until DevSecOps teams get on the same page. A little help from the feds could also be welcome Modern-day software development depends ... - [The Promise and Reality of Cloud Security]( Cloud security has been part of the cybersecurity conversation for years but has been on the sidelines for most enterprises. The shift to remote work during the COVID-19 pandemic and digital transformation projects have moved cloud infrastructure front-and-center as enterprises ... - [10 Hot Talks From Black Hat USA 2022]( Black Hat USA brings together cutting-edge research, new security tools, and sophisticated defensive techniques over the course of two days. There were some recurring themes across the sessions, and many of these topics are going to be important issues to ... [View More Dark Reading Reports >>]( PRODUCTS & RELEASES [Research Highlights Cyber Security's Underestimated Role As a Business and Revenue Enabler]( [Bitwarden Announces Secrets Management With a Combination of Open Source, End-to-End Encryption, and Ease of Use]( [Normalyze Granted Patent for Data Security Posture Management (DSPM)]( [Prancer Announces Integration With ChatGPT for Enhanced Security Assessments](
[MORE PRODUCTS & RELEASES]( CURRENT ISSUE
[The 10 Most Impactful Types of Vulnerabilities for Enterprises Today](
[DOWNLOAD THIS ISSUE](
[VIEW BACK ISSUES]( Dark Reading Daily
-- Published By [Dark Reading](
Informa Tech Holdings LLC | Registered in the United States
with number 7418737 | 605 Third Ave., 22nd Floor, New York, New York 10158, USA
To opt-out of any future Dark Reading Daily Newsletter emails, please respond [here.](
Thoughts about this newsletter? [Give us feedback.](mailto:ContactDarkReading@informa.com)
Keep This Newsletter Out Of Your SPAM Folder
Don't let future editions go missing. Take a moment to add the newsletter's address to your anti-spam white list:
If you're not sure how to do that, ask your administrator or ISP. Or check your anti-spam utility's documentation.
We take your privacy very seriously. Please review our [Privacy Statement.]( [© 2023]( | [Informa Tech]( | [Privacy Statement]( | [Terms & Conditions]( | [Contact Us](mailto:ContactDarkReading@informa.com)