Threats & Vulnerabilities: Page
-
Brand Experience Team/TechTarget
Ransomware gangs increasingly exploiting vulnerabilities
New research from Cisco Talos highlighted three of the most popular known vulnerabilities that were exploited by ransomware gangs for initial access during 2023 and 2024.
By Arielle Waldman • July 11, 2024 -
Brand Experience Team/TechTarget
Check Point sheds light on Windows MSHTML zero-day flaw
A Check Point Software Technologies researcher who discovered CVE-2024-38112 said the Windows spoofing vulnerability may have been exploited as far back at January 2023.
By Alexander Culafi • July 10, 2024 -
Brand Experience Team/TechTarget
Microsoft fixes 2 zero-days in massive July Patch Tuesday
Microsoft disclosed and patched a whopping 142 vulnerabilities in a busy Patch Tuesday that included two zero-day flaws under active exploitation in the wild.
By Rob Wright • July 9, 2024 -
Brand Experience Team/TechTarget
Governments issue warning on China’s APT40 attacks
Government agencies say APT40 continues to pose significant risk to organizations across the globe by exploiting vulnerabilities in public-facing applications.
By Arielle Waldman • July 9, 2024 -
Brand Experience Team/TechTarget
Podcast
Risk & Repeat: Hacks, lies and LockBit
Months after an international law enforcement effort disrupted the notorious ransomware-as-a-service operation, LockBit falsely claimed that it breached the U.S. Federal Reserve.
By Alexander Culafi • July 9, 2024 -
Brand Experience Team/TechTarget
Ransomware hits CDK Global, public sector targets in June
The prevalent threat continued to cause disruptions last month as city halls were forced to close and auto dealerships faced downstream effects after an attack against CDK Global.
By Arielle Waldman • July 8, 2024 -
Brand Experience Team/TechTarget
Video
The importance of compliance officers
Compliance officers ensure a company follows both its internal rules as well as external laws from the government.
By Sabrina Polin • July 3, 2024 -
Brand Experience Team/TechTarget
Video
An explanation of Worldcoin
The Worldcoin cryptocurrency uses iris scans to create unique digital identities.
By Kaitlin Herbert • July 1, 2024 -
Brand Experience Team/TechTarget
Critical OpenSSH vulnerability could affect millions of servers
Exploitation against CVE-2024-6387, which Qualys nicknamed 'regreSSHion,' could let attackers bypass security measures and gain root access to vulnerable servers.
By Arielle Waldman • July 1, 2024 -
Brand Experience Team/TechTarget
TeamViewer breached by Russian state actor Midnight Blizzard
TeamViewer says a Russian state-sponsored threat actor known as Midnight Blizzard gained accessed to the company's corporate network via compromised employee credentials.
By Alexander Culafi • June 28, 2024 -
Brand Experience Team/TechTarget
Supply chain attacks conducted through Polyfill.io service
In February, a Chinese company named Funnell bought the Polyfill.io domain, which sparked concerns in the infosec community about potential supply chain threats.
By Arielle Waldman • June 27, 2024 -
Brand Experience Team/TechTarget
LockBit claim about hacking U.S. Federal Reserve fizzles
Evolve Bank & Trust confirmed that it was affected by a cybersecurity-related incident, but has not yet said whether the LockBit ransomware gang was responsible.
By Alexander Culafi • June 26, 2024 -
Brand Experience Team/TechTarget
MoveIt Transfer vulnerability targeted amid disclosure drama
Progress Software's MoveIt Transfer is under attack again, just one year after a Clop ransomware actor exploited a different zero-day MoveIt flaw against thousands of customers.
By Arielle Waldman • June 26, 2024 -
Brand Experience Team/TechTarget
CISA discloses breach of Chemical Security Assessment Tool
The breach, which CISA first disclosed in March, stemmed from Ivanti zero-day vulnerabilities that a Chinese nation-state threat actor first exploited in January.
By Alexander Culafi • June 25, 2024 -
Brand Experience Team/TechTarget
Video
Benefits of dark web monitoring
Dark web monitoring helps organizations stay ahead of cybersecurity threats by detecting proprietary data breaches, securing accounts and ensuring compliance.
By Sabrina Polin • June 21, 2024 -
Brand Experience Team/TechTarget
Biden administration bans Kaspersky Lab products in US
The Biden administration announced a ban on Kaspersky Lab products inside the United States due to the antivirus vendor's ties with the Russian government.
By Alexander Culafi • June 21, 2024 -
Brand Experience Team/TechTarget
SolarWinds Serv-U vulnerability under attack
The Centre for Cybersecurity Belgium observed exploitation against CVE-2024-28995, a high-severity vulnerability in SolarWind's Serv-U file transfer product.
By Arielle Waldman • June 20, 2024 -
Brand Experience Team/TechTarget
Expert Advice // Port security, scans, attacks and vulnerabilities
Port scan attacks: What they are and how to prevent them
Port scans provide data on how networks operate. In the wrong hands, this info could be part of a larger malicious scheme. Learn how to detect and defend against port scan attacks.
By Michael Cobb • June 20, 2024 -
Brand Experience Team/TechTarget
zero-day vulnerability
A zero-day vulnerability is a security loophole in software, hardware or firmware that threat actors exploit before the vendors can identify and patch it.
By Kinza Yasar , Brien Posey , Sharon Shea • June 20, 2024 -
Brand Experience Team/TechTarget
EPAM denies link to Snowflake customer attacks
EPAM, a Belarusian software company, said an investigation found no evidence that it was connected to recent attacks against Snowflake customer databases.
By Arielle Waldman • June 18, 2024 -
Brand Experience Team/TechTarget
DNS attack
A DNS attack is an exploit in which an attacker takes advantage of vulnerabilities in the domain name system.
By Rahul Awati • June 18, 2024 -
Brand Experience Team/TechTarget
Congress grills Microsoft president over security failures
Microsoft President Brad Smith testifies on a wide range of issues, including Chinese and Russian nation-state attacks, the controversial AI-powered Recall feature and more.
By Alexander Culafi • June 14, 2024 -
Brand Experience Team/TechTarget
Black Basta might have exploited Microsoft flaw as zero-day
While investigating a ransomware attack, Symantec found evidence that suggests Black Basta threat actors exploited a Microsoft vulnerability as a zero-day.
By Arielle Waldman • June 12, 2024 -
Brand Experience Team/TechTarget
Hacking vs. spoofing: What’s the difference?
While email, text and phone enable instant communication in a technology-driven world, they also expose individuals and companies to cyberattacks such as hacking and spoofing.
By Ava DePasquale • June 11, 2024 -
Brand Experience Team/TechTarget
communications intelligence (COMINT)
Communications intelligence (COMINT) is information gathered from the communications between individuals or groups of individuals, including telephone conversations, text messages, email conversations, radio calls and online interactions.
By Rahul Awati • June 10, 2024
Previous
