Tara Seals

Aug 25, 2023 | darkreading.com | Tara Seals

Source: Chris Howes/Wild Places Photography via Alamy Stock PhotoA China-backed advanced persistent threat (APT) group dubbed Flax Typhoon has installed a web of persistent, long-term infections inside dozens of Taiwanese organizations, likely to carry out an extensive cyber espionage campaign — and it did it using only minimal amounts of malware.

Aug 9, 2023 | darkreading.com | Tara Seals

BLACK HAT USA – Las Vegas – Wednesday, Aug. 9 In a summer where extreme weather across the globe has intensified discussions around climate change and what to do about it, cybersecurity has been somewhat mum on the subject. But the reality is, there are plenty of steps that the infosecurity community can take in order to do its part. That's the word from Chloé Messdaghi, head of threat research at Protect AI.

Jul 21, 2023 | darkreading.com | Tara Seals

The Storm-0558 breach that gave Chinese advanced persistent threat (APT) actors access to emails within at least 25 US government agencies could be much further-reaching and impactful than anyone anticipated, potentially placing a much broader swathe of Microsoft cloud services at risk than previously thought. But the lack of authentication logging at many organizations means that the full scope of actual compromise stemming from the situation will take weeks, if not months, to determine.

Jul 17, 2023 | darkreading.com | Tara Seals

AnnouncementsJuly's updates contained 100+ patches and security policy notes, leaving vulnerability management teams stressed and scrambling to prioritize. We're here to help find some zen. Source: Antonio Guillem via Alamy Stock PhotoMicrosoft's July 2023 Patch Tuesday update is the largest one so far this year, weighing in at a whopping 129 bug fixes, with four of them addressing actively exploited zero-days, and nine earning a "critical" rating.

Jul 11, 2023 | darkreading.com | Tara Seals

Less than 24 hours after issuing an urgent fix for a zero-day security vulnerability under active exploitation in the wild, Apple's patch rollout is being reported to break certain websites in Safari. The bug is found in Apple's WebKit browser engine (CVE-2023-37450) and allows arbitrary code execution on fully patched iPhones, Macs, and iPads. It can be exploited in drive-by attacks by luring targets to boobytrapped webpages.