Week in Review: Magecart attacks in MEA, AI Threats, and Water Sector Cybersecurity

I wrote three articles this week, including efforts by the the US federal government to help critical infrastructure firms to defend against increasing cyberattacks on water suppliers and wastewater utilities. Also, researchers are delving into the security risks associated with the rapid adoption of large language models, indicating that many companies may not have fully assessed the security implications for their operations. Finally, skimming attacks on e-commerce sites — frequently referred to as Magecart attacks — are now targeting Middle Eastern retailers with credit-card skimming operations.

CISA's Water Sector Guide Puts Incident Response Front & Center | Dark Reading

As cyberattackers increasingly target water suppliers and wastewater utilities, the US federal government wants to help limit the impact of destructive attacks. (24 January 2024)

Researchers Map AI Threat Landscape, Risks | Dark Reading

With the rush to adopt large language models, companies have not thought through all of the security implications to their businesses. Two groups of researchers tackle the questions. (24 January 2024)

Magecart Adds Middle East Retailers to Long List of Victims | Dark Reading

Cybercriminals who conspire to put credit-card skimmers on e-commerce sites have hit some large vendors in the region. (23 January 2024)