Threats & Vulnerabilities: Page
-
Researchers unveil AWS vulnerabilities, ‘shadow resource’ vector
During a Black Hat USA 2024 session, Aqua Security researchers demonstrated how they discovered six cloud vulnerabilities in AWS services and a new attack vector.
By Rob Wright • Aug. 7, 2024 -
Microsoft confirms DDoS attack disrupted cloud services
Microsoft suffered a DDoS attack on Tuesday that caused massive outages for customers around the world.
By Arielle Waldman • July 31, 2024 -
Microsoft: Ransomware gangs exploiting VMware ESXi flaw
VMware ESXi has proven to be a popular target for ransomware threat actors and a challenge for enterprises to patch.
By Arielle Waldman • July 30, 2024 -
Expert Advice
Evolving ZeroFont phishing attacks target Outlook users
Threat actors are using a new twist on a longtime phishing tactic to compel corporate end users to open malicious emails. Learn how ZeroFont attacks work and how to prevent them.
By Amy DeCarlo • July 29, 2024 -
Video
An explanation of romance scams (pig butchering)
Pig butchering is a scam that exploits virtual relationships to deceive and steal money.
By Tommy Everson • July 29, 2024 -
Video
An explanation of the CrowdStrike outage
A botched CrowdStrike update triggered a massive outage, affecting airlines, healthcare, banking and transit.
By Tommy Everson • July 29, 2024 -
What is a computer exploit?
A computer exploit, or exploit, is a program or piece of code developed to take advantage of a vulnerability in a computer or network system.
By Brien Posey • July 26, 2024 -
Researcher says deleted GitHub data can be accessed ‘forever’
Truffle Security researcher Joe Leon warned GitHub users that deleted repository data is never actually deleted, which creates an "enormous attack vector" for threat actors.
By Arielle Waldman • July 26, 2024 -
CrowdStrike: 97% of Windows sensors back online after outage
While most Windows systems are back online after last week's outage, CrowdStrike CEO George Kurtz said the vendor remains 'committed to restoring every impacted system.'
By Alexander Culafi • July 26, 2024 -
Video
An explanation of Flipper Zero
Flipper Zero is both a tool for pen testers and a learning device for new hackers.
By Tommy Everson • July 25, 2024 -
KnowBe4 catches North Korean hacker posing as IT employee
KnowBe4 says it hired a new principal security engineer for its internal AI team, but quickly detected suspicious activity originating from the employee's workstation.
By Arielle Waldman • July 24, 2024 -
CrowdStrike: Content validation bug led to global outage
CrowdStrike said last week's global outage was caused by a bug in the Falcon platform's content validator, which missed a defective configuration update for its Windows sensor.
By Alexander Culafi • July 24, 2024 -
What is the Cybersecurity Information Sharing Act (CISA)?
The Cybersecurity Information Sharing Act (CISA) allows United States government agencies and non-government entities to share information with each other as they investigate cyberattacks.
By Katie Terrell Hanna • July 23, 2024 -
Dragos: New ICS malware FrostyGoop abuses Modbus
Dragos published research Tuesday unveiling an industrial control systems-focused malware it dubbed FrostyGoop that targets Modbus to disrupt critical infrastructure.
By Alexander Culafi • July 23, 2024 -
Microsoft: Faulty CrowdStrike update affected 8.5M devices
Microsoft says less than 1% of all Windows machines were affected by a defective CrowdStrike Falcon update on Friday, but the disruption has been widespread.
By Arielle Waldman • July 22, 2024 -
Opinion
CrowdStrike chaos casts a long shadow on cybersecurity
As organizations recover from today’s outages, the cybersecurity industry will need to develop new security software evaluation criteria and requirements and learn to parlay risks.
By Dave Gruber • July 19, 2024 -
Opinion
Is today’s CrowdStrike outage a sign of the new normal?
A CrowdStrike update with a faulty sensor file has global implications for Windows systems. But competitors need to limit the finger-pointing in case it happens to them.
By Gabe Knuth • July 19, 2024 -
Defective CrowdStrike update triggers mass IT outage
A faulty update for CrowdStrike's Falcon platform crashed customers' Windows systems, causing outages at airlines, government agencies and other organizations across the globe.
By Rob Wright • July 19, 2024 -
Fin7 helps ransomware gangs with EDR bypass
SentinelOne found the Russia-based cybercriminal group is helping other threat actors, including ransomware gangs, to evade detection with a custom tool named AvNeutralizer.
By Arielle Waldman • July 18, 2024 -
What is employee monitoring?
Employee monitoring is when businesses monitor employees to improve productivity and protect corporate resources.
By Katie Terrell Hanna • July 18, 2024 -
Expert Advice
What dangling pointers are and how to avoid them
Plenty of legacy systems are vulnerable to attackers looking for dangling pointers to gain unauthorized access. Learn how to identify dangling pointers and protect your network.
By Michael Cobb • July 18, 2024 -
NullBulge threat actor targets software supply chain, AI tech
SentinelOne published new research detailing NullBulge, an emerging ransomware actor that recently claimed to have stolen data from Disney's internal Slack channels.
By Alexander Culafi • July 17, 2024 -
The CDK Global outage: Explaining how it happened
CDK Global was hit with a ransomware attack affecting thousands of U.S. auto dealerships. Keep reading to learn more about this attack and how it affected the industry.
By Sean Kerner • July 17, 2024 -
Video
Data protection vs. data privacy vs. data security explained
Data protection, privacy and security all play critical roles in effective data management.
By Tommy Everson • July 15, 2024 -
Video
An explanation of Trojan horse
Trojan horses are a type of malware that can take control of your computer and even access your camera.
By Tommy Everson • July 12, 2024