Dark Reading

1. PyPI's 2FA Requirements Don't Go Far Enough, Researchers Say

   The Python Package Index will require developers to better secure their accounts as cyberattacks ramp up, but protecting the software supply chain will take more than that.

2. 'PostalFurious' SMS Attacks Target UAE Citizens for Data Theft

   SMS campaigns targeting members of the public in the United Arab Emirates have been detected.

3. 'Picture-in-Picture' Obfuscation Spoofs Delta, Kohl's for Credential Harvesting

   A recent campaign tricks victims into visiting credential harvesting sites by hiding malicious URLs behind photos advertising deals from trusted brands.

4. Streamers Ditch Netflix for Dark Web After Password Sharing Ban

   Disgruntled users are pursuing offers for "full Netflix access" at steeply discounted rates.

5. Want Sustainable Security? Find Middle Ground Between Tech & Education

   The winning recipe for sustainable security combines strategic user education and tactical automation of well-constructed processes.

6. Apple Zero-Days, iMessage Used in 4-Year, Ongoing Spying Effort

   Russia's FSB intelligence agency says the zero-click attacks range far beyond Kaspersky, and it has blamed them on the United States' NSA. Those allegations are thus far uncorroborated.

7. How CISOs Can Manage the Intersection of Security, Privacy, And Trust

   Integrating a subject rights request tool with security and compliance solutions can help identify potential data conflicts more efficiently and with greater accuracy.

8. DNB Strengthens its Network Security Posture and Productivity With Ericsson Security Manager Solution

9. Cyversity and United Airlines to Provide Cybersecurity Training Scholarships to Cyversity Members

   Program designed to equip women and underrepresented individuals with the necessary skills and knowledge to succeed in cybersecurity.

10. Tel Aviv Stock Exchange Selects CardinalOps to Reduce Risk of Breaches Due to Undetected Attacks

    Enables financial services firm to operationalize MITRE ATT&CK with Splunk and eliminate detection coverage gaps based on organizational risk and priorities.