Critical Security Bug Opens Cisco BroadWorks to Complete Takeover

Cyberattackers could exploit CVE-2023-20238 to carry out a variety of nefarious deeds, from data theft and code execution to phishing, fraud, and DoS. [TechWeb]( Follow Dark Reading: [RSS]( September 11, 2023 LATEST SECURITY NEWS & COMMENTARY [Critical Security Bug Opens Cisco BroadWorks to Complete Takeover]( Cyberattackers could exploit CVE-2023-20238 to carry out a variety of nefarious deeds, from data theft and code execution to phishing, fraud, and DoS. ['Evil Telegram' Spyware Campaign Infects 60K+ Mobile Users]( Legitimate-seeming Telegram "mods" available in the official Google Play store for the encrypted messaging app signal the rise of a new enterprise threat. [Kenya Initiates Public Sector Digital Skills Training, No Mention of Cybersecurity]( Training will cover cloud skills and working in a paperless environment, but any mention of a cybersecurity element is conspicuously lacking. [Trickbot, Conti Sanctions Affect Top Cybercrime Brass]( US Treasury officials said the sanctions move is part of its effort to combat Russian state-sponsored cybercrime. [3 Strategies to Defend Against Resurging Infostealers]( Infostealer incidents have more than doubled recently, making it critical to bolster your defenses to mitigate this growing threat. [MORE NEWS /]( [MORE COMMENTARY]( HOT TOPICS [Microsoft IDs Security Gaps that Let Threat Actors Steal Signing Key]( China's Storm-0558 accessed user emails at some 25 enterprise organizations earlier this year using forged tokens. [Does Generative AI Comply With Asimov's 3 Laws of Robotics?]( Putting the top 10 generative AI tools to the ethical test reveals more about humanity than artificial intelligence. [How New SEC Rules Can Benefit Cybersecurity Teams]( Securities and Exchange Commission rules elevate cybersecurity to a critical strategic concern and compel businesses to prioritize cyber resilience. [Name That Edge Toon: Prized Possessions]( Come up with a clever caption, and our panel of experts will reward the winner with a $25 Amazon gift card. [As LotL Attacks Evolve, So Must Defenses]( Because living-off-the-land (LotL) attacks masquerade as frequently used, legitimate companies, they are very difficult to block and detect. [MORE]( EDITORS' CHOICE [Apple Hit By 2 No-Click Zero-Days in Blastpass Exploit Chain]( Researchers at Citizen Lab recommend immediately updating any iPhones and iPads to the latest OSes. LATEST FROM THE EDGE [3 Ways to Expand the Cyber Talent Pool From Splash Pad to Watering Hole]( Why — and how — "unqualified" candidates will fill the reservoir with the security workers America is thirsty for. LATEST FROM DR TECHNOLOGY [Microsoft, Google Take on Obsolete TLS Protocols]( Google shortened the lifetime of Transport Layer Security (TLS) certificates, and Microsoft plans to downgrade support for older versions, giving companies more data security but also removing visibility into their own traffic. LATEST FROM DR GLOBAL [Rwanda Launches Smart-City Investment Program]( The ambitious move by the nation also comes with cybersecurity risks. WEBINARS - [Cyber Risk Assessment Secrets From the Pros]( Executives want to know whether they should worry about an attack that hit another organization. They worry how safe they are from a breach. But it can be difficult for security teams to quantitatively measure risk, or even say with ... - [The Threat Hunter's Playbook: Mastering Cloud Defense Strategies]( Secure your spot now for this unforgettable cybersecurity adventure, filled with real-world examples, best practices, and expert insights from our threat research team. Level up your cloud security defense. When you attend this webinar, you will hear from the Sysdig's ... [View More Dark Reading Webinars >>]( WHITE PAPERS - [Threat Intelligence: Data, People and Processes]( - [Building Cyber Resiliency: Key Strategies for Proactive Security Operations]( - [Mandiant Threat Intelligence at Penn State Health]( - [Digital Transformation and Connected Systems Have Opened the Door to New Threat Vectors]( - [Evaluating SASE for the Work-From-Anywhere Era]( - [Essential SASE Must-haves]( - [Cybersecurity in a post pandemic world: A focus on financial services]( [View More White Papers >>]( FEATURED REPORTS - [Everything You Need to Know About DNS Attacks]( - [How Enterprises Are Managing Application Security Risks in a Heightened Threat Environment]( Concerns over API security and low-code/no-code use added to an already-full plate of application security challenges for many organizations over the last year. IT and security decision-makers are deeply concerned about compromises resulting from vulnerabilities in the software supply ... - [Successfully Managing Identity in Modern Cloud and Hybrid Environments]( Cloud promised to simplify the security and management of enterprise systems. In many ways it has, but when it comes to identity management it's as complicated as ever. This report details how to get identity programs on track -- and ... [View More Dark Reading Reports >>]( PRODUCTS & RELEASES [CybeReady Provides Cybersecurity Awareness Month Kits As CISOs Defend Against AI Driven Attacks]( [IBM Expands Cloud Security and Compliance Center]( [Tuya Smart and Amazon Web Services Collaborate to Establish an IoT Security Lab]( [IBM Addresses Data Incident for Janssen CarePath Database]( [MORE PRODUCTS & RELEASES]( CURRENT ISSUE [What Ransomware Groups Look for in Enterprise Victims]( [DOWNLOAD THIS ISSUE]( [VIEW BACK ISSUES]( Dark Reading Daily -- Published By [Dark Reading]( Informa Tech Holdings LLC | Registered in the United States with number 7418737 | 605 Third Ave., 22nd Floor, New York, New York 10158, USA To opt-out of any future Dark Reading Daily Newsletter emails, please respond [here.]( Thoughts about this newsletter? [Give us feedback.](mailto:ContactDarkReading@informa.com) Keep This Newsletter Out Of Your SPAM Folder Don't let future editions go missing. Take a moment to add the newsletter's address to your anti-spam white list: /cdn-cgi/l/email-protection?sp_aid=118108&elq_cid=22844169&sp_eh=9ec2e0353644c03ce56099bfb161a49d1f8a5a22f0d884f0cd961b89d205d529&utm_source=eloqua&utm_medium=email&utm_campaign=DR_NL_Dark%20Reading%20Daily_09.11.23&sp_cid=49744&utm_content=DR_NL_Dark%20Reading%20Daily_09.11.23&sp_eh=9ec2e0353644c03ce56099bfb161a49d1f8a5a22f0d884f0cd961b89d205d529#5f If you're not sure how to do that, ask your administrator or ISP. Or check your anti-spam utility's documentation. We take your privacy very seriously. Please review our [Privacy Statement.]( [© 2023]( | [Informa Tech]( | [Privacy Statement]( | [Terms & Conditions]( | [Contact Us](mailto:ContactDarkReading@informa.com)