Threats & Vulnerabilities: Page
-
Brand Experience Team/TechTarget
White House: Threats to critical infrastructure are ‘severe’
While the White House released the new National Cybersecurity Strategy last year to help combat threats to critical infrastructure organizations, attacks have continued.
By Arielle Waldman • May 8, 2024 -
Brand Experience Team/TechTarget
Authorities identify, sanction LockBit ransomware ringleader
After weeks of waiting, authorities in the U.S., the U.K. and Australia publicly identified 'LockBitSupp,' the mysterious operator behind the prolific LockBit ransomware gang.
By Rob Wright • May 7, 2024 -
Brand Experience Team/TechTarget
U.S. agencies continue to observe Volt Typhoon intrusions
A panel of experts at RSA Conference 2024 discussed Volt Typhoon and warned the Chinese nation-state threat group is still targeting and compromising U.S. organizations.
By Arielle Waldman • May 7, 2024 -
Brand Experience Team/TechTarget
Recorded Future observes ‘concerning’ hacktivism shift
At RSA Conference 2024, Recorded Future detailed alarming trends as nation-state attackers operate under the guise of hacktivism to cover real threats to organizations.
By Arielle Waldman • May 6, 2024 -
Brand Experience Team/TechTarget
document sanitization
Document sanitization is the process of cleaning a document to ensure that only the intended information can be accessed from it.
By Rahul Awati • May 3, 2024 -
Brand Experience Team/TechTarget
What is a potentially unwanted program (PUP)?
A potentially unwanted program (PUP) is a program that may be unwanted, despite the possibility that users consented to download it.
By Alexander Gillis • May 2, 2024 -
Brand Experience Team/TechTarget
U.S. warns of pro-Russian hacktivist attacks against OT systems
CISA calls on OT device manufacturers to implement more effective security protocols as attacks against critical infrastructure organizations continue.
By Arielle Waldman • May 1, 2024 -
Brand Experience Team/TechTarget
Verizon DBIR: Vulnerability exploitation in breaches up 180%
Verizon said it examined approximately twice as many breaches for the 2024 Data Breach Investigations Report -- 10,626 out of 30,458 total tracked incidents.
By Alexander Culafi • May 1, 2024 -
Brand Experience Team/TechTarget
Change Healthcare cyberattack news updates
Risk & Repeat: Change Healthcare’s bad ransomware bet
This Risk & Repeat podcast discusses Change Healthcare's ransomware attack and the apparent further spread of sensitive data despite the company paying a ransom.
By Rob Wright, Alexander Culafi • April 25, 2024 -
Brand Experience Team/TechTarget
Dymium scares ransomware attacks with honeypot specters
Dymium, a security startup that recently emerged from stealth, offers ransomware defense for data stores with a network of honeypot traps for spoofing attackers.
By Tim McCarthy • April 25, 2024 -
Brand Experience Team/TechTarget
Cisco zero-day flaws in ASA, FTD software under attack
Cisco revealed that a nation-state threat campaign dubbed 'ArcaneDoor' exploited two zero-day vulnerabilities in its Adaptive Security Appliance and Firepower Threat Defense products.
By Alexander Culafi • April 25, 2024 -
Brand Experience Team/TechTarget
Critical CrushFTP zero-day vulnerability under attack
While a patch is now available, a critical CrushFTP vulnerability came under attack as a zero-day and could allow attackers to exfiltrate all files on the server.
By Arielle Waldman • April 24, 2024 -
Brand Experience Team/TechTarget
GitHub vulnerability leaks sensitive security reports
The vulnerability is triggered when GitHub users correct code or other mistakes they discover on repositories. But GitHub does not believe it warrants a fix.
By Arielle Waldman • April 24, 2024 -
Brand Experience Team/TechTarget
U.S. cracks down on commercial spyware with visa restrictions
The move marks the latest effort by the U.S. government to curb the spread of commercial spyware, which has been used to target journalists, politicians and human rights activists.
By Alexander Culafi • April 23, 2024 -
Brand Experience Team/TechTarget
Mandiant: Attacker dwell time down, ransomware up in 2023
Mandiant's 'M-Trends' 2024 report offered positive signs for global cybersecurity but warned that threat actors are shifting to zero-day exploitation and evasion techniques.
By Rob Wright • April 23, 2024 -
Brand Experience Team/TechTarget
chief privacy officer (CPO)
A chief privacy officer (CPO) is a corporate executive charged with developing and implementing policies designed to protect employee and customer data from unauthorized access.
By Katie Terrell Hanna • April 22, 2024 -
Brand Experience Team/TechTarget
CISA: Akira ransomware extorted $42M from 250+ victims
The Akira ransomware gang, which utilizes sophisticated hybrid encryption techniques and multiple ransomware variants, targeted vulnerable Cisco VPNs in a campaign last year.
By Alexander Culafi • April 19, 2024 -
Brand Experience Team/TechTarget
Cisco discloses high-severity vulnerability, PoC available
The security vendor released fixes for a vulnerability that affects Cisco Integrated Management Controller, which is used by devices including routers and servers.
By Arielle Waldman • April 18, 2024 -
Brand Experience Team/TechTarget
Mandiant upgrades Sandworm to APT44 due to increasing threat
Over the past decade, Sandworm has been responsible for high-severity attacks that highlight the group's persistence, evasion techniques and threat to government bodies.
By Arielle Waldman • April 17, 2024 -
Brand Experience Team/TechTarget
CISA: Midnight Blizzard obtained federal agency emails
CISA ordered U.S. federal agencies to reset any credentials exposed by Midnight Blizzard's breach against Microsoft and notify CISA in the case of a known or suspected compromise.
By Alexander Culafi • April 12, 2024 -
Brand Experience Team/TechTarget
Palo Alto Networks discloses RCE zero-day vulnerability
Threat actors have exploited the remote code injection flaw, which affects the GlobalProtect gateway in Palo Alto Networks' PAN-OS software, in a 'limited' number of attacks.
By Rob Wright • April 12, 2024 -
Brand Experience Team/TechTarget
Supply chain attack abuses GitHub features to spread malware
Checkmarx warned developers to be cautious when choosing which repositories to use, as attackers are manipulating GitHub features to boost malicious code.
By Arielle Waldman • April 10, 2024 -
Brand Experience Team/TechTarget
Unit 42: Malware-initiated scanning attacks on the rise
Palo Alto Networks' research team warned of threat actors compromising one victim and then using that victim's resources to discreetly scan for vulnerabilities on other systems.
By Alexander Culafi • April 9, 2024 -
Brand Experience Team/TechTarget
Why the Keitaro TDS keeps causing security headaches
Keitaro insists it is on the side of the law, but threat actors continue to flock to the software company's traffic distribution system to redirect users to malicious domains.
By Rob Wright • April 9, 2024 -
Brand Experience Team/TechTarget
Flaws in legacy D-Link NAS devices under attack
Internet scans show threat actors are targeting CVE-2024-3273 in thousands of end-of-life D-Link NAS devices, and exploitation requires no authentication.
By Arielle Waldman • April 8, 2024
Previous
