Threats & Vulnerabilities: Page
-
What is email spam and how to fight it?
Email spam, also known as 'junk email,' refers to unsolicited email messages, usually sent in bulk to a large list of recipients. Humans send spam, but more often, botnets are responsible for sending it.
By Paul Kirvan, Taina Teravainen, Rahul Awati • Sept. 18, 2024 -
Infosec experts detail widespread Telegram abuse
Cybersecurity vendors say threat activity on Telegram has grown rapidly in recent years, and they don't expect the arrest of founder and CEO Pavel Durov to change that trend.
By Arielle Waldman • Sept. 17, 2024 -
Windows spoofing flaw exploited in earlier zero-day attacks
Microsoft reveals that CVE-2024-43461, which was disclosed in September's Patch Tuesday, was previously exploited as a zero-day vulnerability in an attack chain.
By Rob Wright • Sept. 16, 2024 -
Microsoft: Zero-day vulnerability rolled back previous patches
On Patch Tuesday, Microsoft addresses a critical zero-day vulnerability that reversed previous fixes for older vulnerabilities and put Windows 10 systems at risk.
By Arielle Waldman • Sept. 11, 2024 -
Akira ransomware gang targeting SonicWall VPN accounts
Arctic Wolf recently observed the Akira ransomware gang compromising SonicWall SSL VPN accounts, which could be connected to a critical vulnerability in SonicOS.
By Arielle Waldman • Sept. 9, 2024 -
Ransomware rocked healthcare, public services in August
Ransomware remained a highly disruptive threat last month, as notable attacks claimed victims in healthcare, technology, manufacturing and the public sector.
By Arielle Waldman • Sept. 6, 2024 -
White House unveils plan to improve BGP security
The Office of the National Cyber Director has published a roadmap for internet routing security that outlines recommendations for mitigating BGP hijacking and other threats.
By Rob Wright • Sept. 4, 2024 -
FBI: North Korean hackers targeting cryptocurrency employees
North Korean state-sponsored threat actors have been conducting successful social engineering campaigns against cryptocurrency employees over the last several months.
By Arielle Waldman • Sept. 3, 2024 -
What is cybercrime and how can you prevent it?
Cybercrime is any criminal activity that involves a computer, network or networked device.
By Michael Cobb, Kate Brush • Sept. 3, 2024 -
Russia’s APT29 using spyware exploits in new campaigns
A new report from Google TAG suggests that Russia's APT29 is using vulnerability exploits first developed from spyware vendors to target Mongolian government websites.
By Alexander Culafi • Aug. 29, 2024 -
Volt Typhoon exploiting Versa Director zero-day flaw
Lumen Technologies researchers have observed exploitation of CVE-2024-39717 against four U.S. organizations in the ISP, MSP and IT sectors.
By Rob Wright • Aug. 28, 2024 -
Expert Advice
Types of hackers: Black hat, white hat, red hat and more
Black, white and gray hats are familiar to security pros, but as the spectrum evolves to include green, blue, red and purple, things get muddled. Brush up on types of hackers.
By Sharon Shea • Aug. 28, 2024 -
Port of Seattle grappling with ‘possible cyberattack’
A possible cyberattack against Washington's Port of Seattle has caused significant service disruptions to airline travel at the Seattle-Tacoma International Airport.
By Alexander Culafi • Aug. 27, 2024 -
NCC Group: Ransomware down in June, July YoY
While ransomware activity in July increased from the previous month, NCC Group researchers found the number of attacks was much lower compared to earlier this year.
By Alexander Culafi • Aug. 22, 2024 -
Microchip Technology discloses cyberattack, business delays
The microprocessor manufacturer says it detected malicious activity in its network over the weekend, which disrupted business operations and impaired its ability to fulfill orders.
By Arielle Waldman • Aug. 21, 2024 -
Video
An explanation of cybersecurity
Cybersecurity protects internet-connected systems from attacks, covering hardware, software and data.
By Tommy Everson • Aug. 21, 2024 -
U.S. agencies attribute Trump campaign hack to Iran
CISA, the FBI and the Office of the Director of National Intelligence attributed a recent hack-and-leak attack on former President Donald Trump's 2024 election campaign to Iran.
By Alexander Culafi • Aug. 20, 2024 -
National Public Data Breach News Center
Social Security number data breach: What you need to know
An estimated 2.9 million Social Security numbers and other PII have been leaked onto the dark web in a National Public Data breach.
By Sean Kerner • Aug. 19, 2024 -
July ransomware attacks slam public sector organizations
The global IT outage caused by an errant CrowdStrike channel file update dominated security news last month. But there were still plenty of ransomware attacks to go around.
By Alexander Culafi • Aug. 15, 2024 -
National Public Data Breach News Center
National Public Data confirms breach, scope unknown
Reports suggest billions of personal records could have been compromised in the attack against data aggregator National Public Data, but the reality is more complicated.
By Alexander Culafi • Aug. 15, 2024 -
Law enforcement disrupts Radar/Dispossessor ransomware group
The now-disrupted Radar/Dispossessor ransomware gang was launched in August 2023, and its members have targeted dozens of SMBs across critical sectors via dual extortion.
By Alexander Culafi • Aug. 13, 2024 -
Zenity CTO on dangers of Microsoft Copilot prompt injections
Zenity's CTO describes how hidden email code can be used to feed malicious prompts to a victim's Copilot instance, leading to false outputs and even credential harvesting.
By Alexander Culafi • Aug. 8, 2024 -
Wiz researchers hacked into leading AI infrastructure providers
During Black Hat USA 2024, Wiz researchers discussed how they were able to infiltrate leading AI service providers and access confidential data and models across the platforms.
By Arielle Waldman • Aug. 8, 2024 -
Akamai warns enterprises that VPN attacks will only increase
During Black Hat USA 2024, Akamai's Ori David revealed new VPN post-exploitation techniques that open the attack vector to threat actors of all skill levels.
By Arielle Waldman • Aug. 7, 2024 -
CISA: Election infrastructure has never been more secure
CISA Director Jen Easterly emphasized at Black Hat 2024 that election stakeholders cannot be complacent because 'the threat environment has never been so complex.'
By Alexander Culafi • Aug. 7, 2024