'Scattered Spider' Behind MGM Cyberattack, Targets Casinos

The ransomware group is a collection of young adults who also recently breached Caesars Entertainment and made a ransom score in the tens of millions. [TechWeb]( Follow Dark Reading: [RSS]( September 15, 2023 LATEST SECURITY NEWS & COMMENTARY ['Scattered Spider' Behind MGM Cyberattack, Targets Casinos]( The ransomware group is a collection of young adults who also recently breached Caesars Entertainment and made a ransom score in the tens of millions. [Microsoft Teams Hacks Are Back, as Storm-0324 Embraces TeamsPhisher]( Collaboration apps are a boost to business productivity, but also a uniquely attractive target for cyberattackers. [Stealer Thugs Behind RedLine & Vidar Pivot to Ransomware]( In a notable shift in strategy, the threat actors are abusing code-signing certificates to spread a double whammy of infostealers and ransomware payloads. [Mideast Retailers Dogged by Scam Facebook Pages Offering 'Investment' Opportunities]( Around 900 pages were identified as using Arabic language and familiar brand names to snare users and steal their money and personal details — presenting big brand protection issues for retailers. [Cuba Ransomware Gang Continues to Evolve With Dangerous Backdoor]( The Russian-speaking ransomware gang continues to update its tactics while managing to steal highly sensitive information from its victims. [How to Transform Security Awareness Into Security Culture]( Leverage the human layer as a crucial cog in building cyber resilience within the organization. [Cybersecurity and Compliance in the Age of AI]( It takes a diverse village of experts to enact effective cybersecurity guidelines, practices, and processes. [MORE NEWS /]( [MORE COMMENTARY]( HOT TOPICS [MGM Resorts Cyberattack Hobbles Las Vegas Strip Operations]( Hospitality behemoth struggles to recover following a Sunday cyber incident that looks a lot like a ransomware attack. [When LockBit Ransomware Fails, Attackers Deploy Brand-New '3AM']( Nothing good happens after 2 a.m., they say, especially when hackers have two kinds of ransomware at their disposal. [Cybersecurity Skills Gap: Roadies & Gamers Are Untapped Talent]( Gamers and former sound engineers and roadies can help boost the cybersecurity talent pool. Their flexible mindset and attention to detail make them valuable resources. [MORE]( EDITORS' CHOICE [Microsoft Azure HDInsight Plagued With XSS Vulnerabilities]( To boot, the technology could be riddled with other flaws via its Apache services components, a security vendor says. LATEST FROM THE EDGE [Why Identity Management Is the Key to Stopping APT Cyberattacks]( Dark Reading News Desk: CrowdStrike's Adam Meyers talks China, Iran, Russia, and more in this expert dive into the current APT threat actor landscape. LATEST FROM DR TECHNOLOGY [Coding Tips to Sidestep JavaScript Vulnerabilities]( This Tech Tip focuses on best security practices to write secure JavaScript code. LATEST FROM DR GLOBAL [Israeli Hospital Hit By Ransomware Attack, 1TB Data Stolen]( Vital medical equipment was unaffected, but attackers stole and leaked lots of personal data. WEBINARS - [Preventing Attackers From Navigating Your Enterprise Systems]( Cyber attackers are increasingly stealing user credentials and waltzing right into enterprise networks. Once in, they can move laterally to other internal systems and gain access to a wide variety of applications and privileged systems. In this webinar, experts discuss ... - [Managing Security In a Hybrid Cloud Environment]( Many enterprises have embraced hybrid- and multi-clouds. They spread their workloads across private data centers and public cloud, or across multiple cloud providers. How do you manage security when the tools are all different? How do you enforce security controls ... [View More Dark Reading Webinars >>]( WHITE PAPERS - [Threat Intelligence: Data, People and Processes]( - [Global Perspectives on Threat Intelligence]( - [Building Cyber Resiliency: Key Strategies for Proactive Security Operations]( - [Crucial Considerations when Enabling Secure Industrial Digital Transformation]( - [Causes and Consequences of IT and OT Convergence]( - [Work From Anywhere Doesn't Have to Be Complicated]( - [Know your customer: Enable a 360-degree view with customer identity & access management]( [View More White Papers >>]( FEATURED REPORTS - [Concerns Mount Over Ransomware, Zero-Day Bugs, and AI-Enabled Malware]( - [Everything You Need to Know About DNS Attacks]( - [How Enterprises Are Managing Application Security Risks in a Heightened Threat Environment]( Concerns over API security and low-code/no-code use added to an already-full plate of application security challenges for many organizations over the last year. IT and security decision-makers are deeply concerned about compromises resulting from vulnerabilities in the software supply ... [View More Dark Reading Reports >>]( PRODUCTS & RELEASES [Google and Acalvio Partner to Deliver Active Defense to Protect Customers From Advanced Threats]( [Cloudflare Announces Unified Data Protection Suite to Address Risks of Modern Coding and Increased AI Use]( [World Security Report Finds Physical Security Incidents Cost Companies USD $1T in 2022]( [NordVPN Launches Sonar to Prevent Phishing Attacks]( [Claroty Unveils Vulnerability & Risk Management Capabilities to Elevate Risk Reduction for Cyber-Physical Systems]( [MORE PRODUCTS & RELEASES]( CURRENT ISSUE [The State of Supply Chain Threats]( [DOWNLOAD THIS ISSUE]( [VIEW BACK ISSUES]( Dark Reading Daily -- Published By [Dark Reading]( Informa Tech Holdings LLC | Registered in the United States with number 7418737 | 605 Third Ave., 22nd Floor, New York, New York 10158, USA To opt-out of any future Dark Reading Daily Newsletter emails, please respond [here.]( Thoughts about this newsletter? [Give us feedback.](mailto:ContactDarkReading@informa.com) Keep This Newsletter Out Of Your SPAM Folder Don't let future editions go missing. Take a moment to add the newsletter's address to your anti-spam white list: /cdn-cgi/l/email-protection?sp_aid=118240&elq_cid=22844169&sp_eh=9ec2e0353644c03ce56099bfb161a49d1f8a5a22f0d884f0cd961b89d205d529&utm_source=eloqua&utm_medium=email&utm_campaign=DR_NL_Dark%20Reading%20Daily_09.15.23&sp_cid=49843&utm_content=DR_NL_Dark%20Reading%20Daily_09.15.23&sp_eh=9ec2e0353644c03ce56099bfb161a49d1f8a5a22f0d884f0cd961b89d205d529#11 If you're not sure how to do that, ask your administrator or ISP. Or check your anti-spam utility's documentation. We take your privacy very seriously. Please review our [Privacy Statement.]( [© 2023]( | [Informa Tech]( | [Privacy Statement]( | [Terms & Conditions]( | [Contact Us](mailto:ContactDarkReading@informa.com)