Curated news, CVE analysis, and threat reports from the world's top cybersecurity sources.
Dark Reading editors discuss recently uncovered security stories including a Delta flight disrupted by a Wi-Fi hack and the US government's new hack back strategy. The Wi-Fi hack demonstrated how in-flight connectivity can be exploited to disrupt aircraft systems.
AWS Network Firewall now supports rule hit count, allowing security teams to identify which firewall rules are actively matching traffic. This feature helps teams optimize firewall rule sets by identifying rules that consume capacity without matching traffic.
This week's Threat Source newsletter introduces Mick as the new editor, a globally recognized security strategist with a career spanning offensive operations, threat intelligence, and incident response. The newsletter covers recent cybersecurity developments and provides insights from Talos Intelligence researchers.
Hackers compromised the maintainer account behind the widely used Rust crate arrayref to introduce malware that executed on developers' systems during compilation. The malicious releases were published to crates.io and executed info-stealing payloads during the build process.
A vulnerability in N-able's Passportal password manager, popular among MSPs and SMBs, exposed password vault master keys even after a patch was issued. The cloud-based design of the product introduces risks that make it challenging to fully secure.
Senators Marsha Blackburn and Richard Blumenthal criticized TikTok for knowingly withholding a critical safety measure for millions of American users. The letter pressed TikTok on why certain safety features were not made available to all users.