Dark Reading

1. ZuoRAT Hijacks SOHO Routers from Cisco, Netgear

   The malware has been in circulation since 2020, with sophisticated, advanced malicious actors taking advantage of the vulnerabilities in SOHO routers as the work-from-home population expands rapidly.

2. Broken Authentication Vuln Threatens Amazon Photos Android App

   The now-patched bug allows an attacker to gain full access to a user's Amazon files.

3. How to Master the Kill Chain Before Your Attackers Do

   In the always-changing world of cyberattacks, preparedness is key.

4. Cyberattacks via Unpatched Systems Cost Orgs More Than Phishing

   External attacks focused on vulnerabilities are still the most common ways that companies are successfully attacked, according to incident data.

5. Shifting the Cybersecurity Paradigm From Severity-Focused to Risk-Centric

   Embrace cyber-risk modeling and ask security teams to pinpoint the risks that matter and prioritize remediation efforts.

6. 5 Surprising Cyberattacks AI Stopped This Year

   See how these novel, sophisticated, or creative threats used techniques such as living off the land to evade detection from traditional defensive measures — but were busted by AI.

7. Kaspersky Reveals Phishing Emails That Employees Find Most Confusing

   Results from phishing simulation campaigns highlight the five most effective types of phishing email.

8. Facebook Business Pages Targeted via Chatbot in Data-Harvesting Campaign

   The clever, interactive phishing campaign is a sign of increasingly complex social-engineering attacks, researchers warn.

9. Google Analytics Continues to Lose SEO Visibility as Bans Continue

   Google Analytics has been found to be in violation of GDPR privacy laws by Italy — the third country to ban it.

10. 'Raccoon Stealer' Scurries Back on the Scene After Hiatus

    Researchers this week said they had observed criminals using a new and improved version of the prolific malware, barely three months after its authors announced they were quitting.