Threats & Vulnerabilities: Page


  • The techtarget logo in teal next to the text reading techtarget set against a dark-blue background
    Image attribution tooltip
    Brand Experience Team/TechTarget
    Image attribution tooltip

    Researchers unveil AWS vulnerabilities, ‘shadow resource’ vector

    During a Black Hat USA 2024 session, Aqua Security researchers demonstrated how they discovered six cloud vulnerabilities in AWS services and a new attack vector.

    By Rob Wright • Aug. 7, 2024
  • The techtarget logo in teal next to the text reading techtarget set against a dark-blue background
    Image attribution tooltip
    Brand Experience Team/TechTarget
    Image attribution tooltip

    Microsoft confirms DDoS attack disrupted cloud services

    Microsoft suffered a DDoS attack on Tuesday that caused massive outages for customers around the world.

    By Arielle Waldman • July 31, 2024
  • The techtarget logo in teal next to the text reading techtarget set against a dark-blue background
    Image attribution tooltip
    Brand Experience Team/TechTarget
    Image attribution tooltip

    Microsoft: Ransomware gangs exploiting VMware ESXi flaw

    VMware ESXi has proven to be a popular target for ransomware threat actors and a challenge for enterprises to patch.

    By Arielle Waldman • July 30, 2024
  • The techtarget logo in teal next to the text reading techtarget set against a dark-blue background
    Image attribution tooltip
    Brand Experience Team/TechTarget
    Image attribution tooltip
    Expert Advice

    Evolving ZeroFont phishing attacks target Outlook users

    Threat actors are using a new twist on a longtime phishing tactic to compel corporate end users to open malicious emails. Learn how ZeroFont attacks work and how to prevent them.

    By • July 29, 2024
  • The techtarget logo in teal next to the text reading techtarget set against a dark-blue background
    Image attribution tooltip
    Brand Experience Team/TechTarget
    Image attribution tooltip
    Video

    An explanation of romance scams (pig butchering)

    Pig butchering is a scam that exploits virtual relationships to deceive and steal money.

    By Tommy Everson • July 29, 2024
  • The techtarget logo in teal next to the text reading techtarget set against a dark-blue background
    Image attribution tooltip
    Brand Experience Team/TechTarget
    Image attribution tooltip
    Video

    An explanation of the CrowdStrike outage

    A botched CrowdStrike update triggered a massive outage, affecting airlines, healthcare, banking and transit.

    By Tommy Everson • July 29, 2024
  • The techtarget logo in teal next to the text reading techtarget set against a dark-blue background
    Image attribution tooltip
    Brand Experience Team/TechTarget
    Image attribution tooltip

    What is a computer exploit?

    A computer exploit, or exploit, is a program or piece of code developed to take advantage of a vulnerability in a computer or network system.

    By • July 26, 2024
  • The techtarget logo in teal next to the text reading techtarget set against a dark-blue background
    Image attribution tooltip
    Brand Experience Team/TechTarget
    Image attribution tooltip

    Researcher says deleted GitHub data can be accessed ‘forever’

    Truffle Security researcher Joe Leon warned GitHub users that deleted repository data is never actually deleted, which creates an "enormous attack vector" for threat actors.

    By Arielle Waldman • July 26, 2024
  • The techtarget logo in teal next to the text reading techtarget set against a dark-blue background
    Image attribution tooltip
    Brand Experience Team/TechTarget
    Image attribution tooltip

    CrowdStrike: 97% of Windows sensors back online after outage

    While most Windows systems are back online after last week's outage, CrowdStrike CEO George Kurtz said the vendor remains 'committed to restoring every impacted system.'

    By Alexander Culafi • July 26, 2024
  • The techtarget logo in teal next to the text reading techtarget set against a dark-blue background
    Image attribution tooltip
    Brand Experience Team/TechTarget
    Image attribution tooltip
    Video

    An explanation of Flipper Zero

    Flipper Zero is both a tool for pen testers and a learning device for new hackers.

    By Tommy Everson • July 25, 2024
  • The techtarget logo in teal next to the text reading techtarget set against a dark-blue background
    Image attribution tooltip
    Brand Experience Team/TechTarget
    Image attribution tooltip

    KnowBe4 catches North Korean hacker posing as IT employee

    KnowBe4 says it hired a new principal security engineer for its internal AI team, but quickly detected suspicious activity originating from the employee's workstation.

    By Arielle Waldman • July 24, 2024
  • The techtarget logo in teal next to the text reading techtarget set against a dark-blue background
    Image attribution tooltip
    Brand Experience Team/TechTarget
    Image attribution tooltip

    CrowdStrike: Content validation bug led to global outage

    CrowdStrike said last week's global outage was caused by a bug in the Falcon platform's content validator, which missed a defective configuration update for its Windows sensor.

    By Alexander Culafi • July 24, 2024
  • The techtarget logo in teal next to the text reading techtarget set against a dark-blue background
    Image attribution tooltip
    Brand Experience Team/TechTarget
    Image attribution tooltip

    What is the Cybersecurity Information Sharing Act (CISA)?

    The Cybersecurity Information Sharing Act (CISA) allows United States government agencies and non-government entities to share information with each other as they investigate cyberattacks.

    By Katie Terrell Hanna • July 23, 2024
  • The techtarget logo in teal next to the text reading techtarget set against a dark-blue background
    Image attribution tooltip
    Brand Experience Team/TechTarget
    Image attribution tooltip

    Dragos: New ICS malware FrostyGoop abuses Modbus

    Dragos published research Tuesday unveiling an industrial control systems-focused malware it dubbed FrostyGoop that targets Modbus to disrupt critical infrastructure.

    By Alexander Culafi • July 23, 2024
  • The techtarget logo in teal next to the text reading techtarget set against a dark-blue background
    Image attribution tooltip
    Brand Experience Team/TechTarget
    Image attribution tooltip

    Microsoft: Faulty CrowdStrike update affected 8.5M devices

    Microsoft says less than 1% of all Windows machines were affected by a defective CrowdStrike Falcon update on Friday, but the disruption has been widespread.

    By Arielle Waldman • July 22, 2024
  • The techtarget logo in teal next to the text reading techtarget set against a dark-blue background
    Image attribution tooltip
    Brand Experience Team/TechTarget
    Image attribution tooltip
    Opinion

    CrowdStrike chaos casts a long shadow on cybersecurity

    As organizations recover from today’s outages, the cybersecurity industry will need to develop new security software evaluation criteria and requirements and learn to parlay risks.

    By • July 19, 2024
  • The techtarget logo in teal next to the text reading techtarget set against a dark-blue background
    Image attribution tooltip
    Brand Experience Team/TechTarget
    Image attribution tooltip
    Opinion

    Is today’s CrowdStrike outage a sign of the new normal?

    A CrowdStrike update with a faulty sensor file has global implications for Windows systems. But competitors need to limit the finger-pointing in case it happens to them.

    By • July 19, 2024
  • The techtarget logo in teal next to the text reading techtarget set against a dark-blue background
    Image attribution tooltip
    Brand Experience Team/TechTarget
    Image attribution tooltip

    Defective CrowdStrike update triggers mass IT outage

    A faulty update for CrowdStrike's Falcon platform crashed customers' Windows systems, causing outages at airlines, government agencies and other organizations across the globe.

    By Rob Wright • July 19, 2024
  • The techtarget logo in teal next to the text reading techtarget set against a dark-blue background
    Image attribution tooltip
    Brand Experience Team/TechTarget
    Image attribution tooltip

    Fin7 helps ransomware gangs with EDR bypass

    SentinelOne found the Russia-based cybercriminal group is helping other threat actors, including ransomware gangs, to evade detection with a custom tool named AvNeutralizer.

    By Arielle Waldman • July 18, 2024
  • The techtarget logo in teal next to the text reading techtarget set against a dark-blue background
    Image attribution tooltip
    Brand Experience Team/TechTarget
    Image attribution tooltip

    What is employee monitoring?

    Employee monitoring is when businesses monitor employees to improve productivity and protect corporate resources.

    By Katie Terrell Hanna • July 18, 2024
  • The techtarget logo in teal next to the text reading techtarget set against a dark-blue background
    Image attribution tooltip
    Brand Experience Team/TechTarget
    Image attribution tooltip
    Expert Advice

    What dangling pointers are and how to avoid them

    Plenty of legacy systems are vulnerable to attackers looking for dangling pointers to gain unauthorized access. Learn how to identify dangling pointers and protect your network.

    By • July 18, 2024
  • The techtarget logo in teal next to the text reading techtarget set against a dark-blue background
    Image attribution tooltip
    Brand Experience Team/TechTarget
    Image attribution tooltip

    NullBulge threat actor targets software supply chain, AI tech

    SentinelOne published new research detailing NullBulge, an emerging ransomware actor that recently claimed to have stolen data from Disney's internal Slack channels.

    By Alexander Culafi • July 17, 2024
  • The techtarget logo in teal next to the text reading techtarget set against a dark-blue background
    Image attribution tooltip
    Brand Experience Team/TechTarget
    Image attribution tooltip

    The CDK Global outage: Explaining how it happened

    CDK Global was hit with a ransomware attack affecting thousands of U.S. auto dealerships. Keep reading to learn more about this attack and how it affected the industry.

    By • July 17, 2024
  • The techtarget logo in teal next to the text reading techtarget set against a dark-blue background
    Image attribution tooltip
    Brand Experience Team/TechTarget
    Image attribution tooltip
    Video

    Data protection vs. data privacy vs. data security explained

    Data protection, privacy and security all play critical roles in effective data management.

    By Tommy Everson • July 15, 2024
  • The techtarget logo in teal next to the text reading techtarget set against a dark-blue background
    Image attribution tooltip
    Brand Experience Team/TechTarget
    Image attribution tooltip
    Video

    An explanation of Trojan horse

    Trojan horses are a type of malware that can take control of your computer and even access your camera.

    By Tommy Everson • July 12, 2024