Dark Reading

1. Despite Recession Jitters, M&A Dominates a Robust Cybersecurity Market

   Funding has been somewhat lower than last year, but investment remains healthy, analysts say, amid thirst for cloud security in particular.

2. Russia Planning Cyberattacks on Ukraine's Energy Grid

   Ukraine military intelligence says Russia is planning cyberattacks on the country's energy sector, as well as against allies including Poland and the Baltic states.

3. Cyber Threat Alliance Extends Membership to 6+ Leading Cybersecurity Companies

   CTA now has 36 members headquartered in 11 countries who follow cyber activities across the world, showing cybersecurity industry members realize the value in collaboration.

4. Samsung Fails Consumers in Preventable Back-to-Back Data Breaches, According to Federal Lawsuit

   Company unnecessarily collected consumers' personal data and failed to safeguard it, suit alleges, leading to two back-to-back data breaches.

5. Should Hacking Have a Code of Conduct?

   For white hats who play by the rules, here are several ethical tenets to consider.

6. How Quantum Physics Leads to Decrypting Common Algorithms

   YouTuber minutephysics explains how Shor's algorithm builds on existing formulae like Euclid's algorithm and Fourier transforms to leverage quantum superpositioning and break encryption.

7. We're Thinking About SaaS the Wrong Way

   Many enterprise applications are built outside of IT, but we still treat the platforms they're built with as point solutions.

8. App Developers Increasingly Targeted via Slack, DevOps Tools

   Slack, Docker, Kubernetes, and other applications that allow developers to collaborate have become the latest vector for software supply chain attacks.

9. Malicious Apps With Millions of Downloads Found in Apple App Store, Google Play

   The ongoing ad fraud campaign can be traced back to 2019, but recently expanded into the iOS ecosystem, researchers say.

10. CISA: Zoho ManageEngine RCE Bug Is Under Active Exploit

    The bug allows unauthenticated code execution on the company's firewall products, and CISA says it poses "significant risk" to federal government.