Dark Reading

1. Riot Games Latest Video-Game Maker to Suffer Breach

   Highlighting continued attacks on game developers, attackers stole source code from and issued a ransom demand to the maker of League of Legends.

2. A Child's Garden of Cybersecurity

   Whether you dream of your child growing into a CISO or just want them to improve their security hygiene, consider this roundup of literary geekery.

3. Federal Agencies Infested by Cyberattackers via Legit Remote Management Systems

   Hackers don't need a key to get past your defenses, if they can essentially teleport using RMMs, warns CISA and the NSA.

4. Dutchman Detained for Dealing Details of Tens of Millions of People

   The accused sold an enormous data set stolen from the Austrian radio and television licensing authority — to an undercover cop.

5. SaaS RootKit Exploits Hidden Rules in Microsoft 365

   A vulnerability within Microsoft's OAuth application registration allows an attacker to create hidden forwarding rules that act as a malicious SaaS rootkit.

6. Hive Ransomware Gang Loses Its Honeycomb, Thanks to DoJ

   The US Department of Justice hacked into Hive's infrastructure, made off with hundreds of decryptors, and seized the gang's operations.

7. German Government, Airports, Banks Hit With Killnet DDoS Attacks

   After Berlin pledged tanks for Ukraine, some German websites were knocked offline temporarily by Killnet DDoS attacks.

8. 7 Insights From a Ransomware Negotiator

   The rapid maturation and rebranding of ransomware groups calls for relentless preparation and flexibility in response, according to one view from the trenches.

9. Companies Struggle With Zero Trust as Attackers Adapt to Get Around It

   Only one in 10 enterprises will create a robust zero-trust foundation in the next three years, while more than half of attacks won't even be prevented by it, according to Gartner.

10. New Study Examines Application Connectivity Security in the Cloud