Threats & Vulnerabilities: Page
-
Brand Experience Team/TechTarget
electronic intelligence (ELINT)
Electronic intelligence (ELINT) is intelligence gathered using electronic sensors, usually used in military applications.
By Rahul Awati • June 7, 2024 -
Brand Experience Team/TechTarget
log file
A log file, or simply a log, in a computing context is the automatically produced and timestamped documentation of events relevant to a particular system.
By Rahul Awati, Ivy Wigmore • June 7, 2024 -
Brand Experience Team/TechTarget
Critical Progress Telerik vulnerability under attack
Threat actors are targeting vulnerable Progress Telerik Report Server systems just days after a proof of concept was published detailing a vulnerability exploit chain.
By Arielle Waldman • June 6, 2024 -
Brand Experience Team/TechTarget
Ransomware ravaged schools and cities in May
The public sector took the brunt of ransomware in May, while another damaging attack against a healthcare company disrupted patient access to pharmacy services.
By Arielle Waldman • June 6, 2024 -
Brand Experience Team/TechTarget
Tenable warns of vulnerability in Azure service tags
Microsoft disagreed with Tenable's assessment, saying the security issue in Azure service tags is not a vulnerability and that additional authentication layers are required.
By Alexander Culafi • June 4, 2024 -
Brand Experience Team/TechTarget
Expert Advice // Top LLM threats and how to defend against them
ChatGPT plugin flaws introduce enterprise security risks
Insecure plugin design -- one of the top 10 LLM vulnerabilities, according to OWASP -- opens enterprises to attacks. Explore ChatGPT plugin security risks and how to mitigate them.
By Ashwin Krishnan • June 4, 2024 -
Brand Experience Team/TechTarget
Mandiant: Ransomware investigations up 20% in 2023
The cybersecurity company observed a sharp rise in activity on data leak sites in 2023 as well as an increase in ransomware actors using legitimate commercial tools during attacks.
By Arielle Waldman • June 3, 2024 -
Brand Experience Team/TechTarget
Hugging Face tokens exposed, attack scope unknown
After detecting unauthorized access on its Spaces platform, Hugging Face disclosed that customer secrets might have been exposed and began revoking access tokens.
By Arielle Waldman • June 3, 2024 -
Brand Experience Team/TechTarget
Threat actor compromising Snowflake database customers
A threat actor tracked as UNC5537 is using stolen credentials against Snowflake database customers to conduct data theft and extortion attacks, cloud security firm Mitiga said.
By Alexander Culafi • May 31, 2024 -
Brand Experience Team/TechTarget
Law enforcement conducts ‘largest ever’ botnet takedown
An international law enforcement effort called 'Operation Endgame' disrupted several infamous malware loaders and botnets used by ransomware gangs and other cybercriminals.
By Arielle Waldman • May 30, 2024 -
Brand Experience Team/TechTarget
Why healthcare data is often the target of ransomware attacks
The healthcare industry relies heavily on IT systems. Sensitive patient data is valuable to hackers, leading to ransomware attacks that disrupt operations and endanger lives.
By Sean Kerner • May 29, 2024 -
Brand Experience Team/TechTarget
Check Point discovers vulnerability tied to VPN attacks
While Check Point identified CVE-2024-24919 as the root cause behind recent attack attempts on its VPN products, it's unclear if threat actors gained access to customer networks.
By Rob Wright, Alexander Culafi • May 29, 2024 -
Brand Experience Team/TechTarget
Check Point warns of threat actors targeting VPNs
Check Point said threat actors were targeting a small number of customers by attempting to compromise local VPN accounts that only utilized passwords for authentication.
By Alexander Culafi • May 28, 2024 -
Brand Experience Team/TechTarget
Expert Advice
What role does an initial access broker play in the RaaS model?
Initial access brokers play an increasingly vital role in the ransomware ecosystem, establishing entry points from which RaaS groups can facilitate attacks against organizations.
By Amanda Scheldt • May 23, 2024 -
Brand Experience Team/TechTarget
93% of vulnerabilities unanalyzed by NVD since February
New research from VulnCheck shows the NIST's National Vulnerability Database has struggled to manage a growing number of reported vulnerabilities this year.
By Arielle Waldman • May 23, 2024 -
Brand Experience Team/TechTarget
Critical bug discovered in open source utility Fluent Bit
Tenable researchers discovered a critical vulnerability, dubbed 'Linguistic Lumberjack,' in Fluent Bit, an open source logging utility widely used by major cloud providers.
By Alexander Culafi • May 21, 2024 -
Brand Experience Team/TechTarget
Rapid7 warns of alarming zero-day vulnerability trends
The cybersecurity vendor tracked vulnerabilities that were used by threat actors in mass compromise events and found more than half were exploited as zero days.
By Arielle Waldman • May 21, 2024 -
Brand Experience Team/TechTarget
ATM jackpotting
ATM jackpotting is the exploitation of physical and software vulnerabilities in automated banking machines that result in the machines dispensing cash.
By Rahul Awati • May 20, 2024 -
Brand Experience Team/TechTarget
What LockBitSupp charges mean for ransomware investigations
At RSA Conference 2024, Recorded Future's Allan Liska discussed evolving ransomware trends and how authorities recently exposed the LockBit ransomware group ringleader.
By Arielle Waldman • May 16, 2024 -
Brand Experience Team/TechTarget
Worldcoin explained: Everything you need to know
Sam Altman's Worldcoin uses iris scans for unique identification with plans to expand for wider adoption of a global currency on the blockchain. However, there are privacy concerns.
By Amanda Hetler • May 16, 2024 -
Brand Experience Team/TechTarget
Google discloses 2 zero-day vulnerabilities in less than a week
Google released fixed versions to address the two vulnerabilities in its Chrome web browser, but the updates will roll out in stages with no specific dates available.
By Arielle Waldman • May 14, 2024 -
Brand Experience Team/TechTarget
Pegasus malware
Pegasus malware is spyware that can hack any iOS or Android device and steal a variety of data from the infected device, including text messages, emails, key logs, audio and information from installed applications, such as Facebook or Instagram.
By Linda Rosencrance, Andrew Zola • May 10, 2024 -
Brand Experience Team/TechTarget
US officials optimistic on AI but warn of risks, abuse
Federal government leaders at RSA Conference 2024 touted the benefits of AI pilot programs but also outlined how a variety of threat actors are currently abusing the technology.
By Rob Wright • May 10, 2024 -
Brand Experience Team/TechTarget
Dell ‘security incident’ might affect millions
Dell notified customers that a company portal connected to customer data exposed orders, names and addresses, while reports indicate the data is now up for sale on the dark web.
By Tim McCarthy • May 9, 2024 -
Brand Experience Team/TechTarget
Experts highlight progress, challenges for election security
Infosec professionals at RSA Conference 2024 discuss digital and physical security challenges for election cycles across the globe in a post-COVID-19 landscape.
By Alexander Culafi • May 8, 2024
Previous
