Threats & Vulnerabilities: Page
-
Brand Experience Team/TechTarget
Ransomware attacks ravaged municipal governments in March
Many municipalities across the U.S. faced network outages, data breaches and large ransom demands following a flurry of ransomware attacks last month.
By Arielle Waldman • April 4, 2024 -
Brand Experience Team/TechTarget
Sophos: Ransomware present in 70% of IR investigations
Sophos' Active Adversary Report said securing remote desktop protocols and Active Directories and hardening credentials can help limit the influx of successful ransomware attacks.
By Arielle Waldman • April 3, 2024 -
Brand Experience Team/TechTarget
Cyber Safety Review Board slams Microsoft security failures
The Department of Homeland Security's Cyber Safety Review Board said a 'cascade' of errors at Microsoft allowed nation-state hackers to access U.S. government emails last year.
By Alexander Culafi • April 3, 2024 -
Brand Experience Team/TechTarget
Trend Micro: LockBit ransomware gang’s comeback is failing
LockBit is struggling to resume operations in part due to the name-and-shame aspect of the international law enforcement operation responsible for the gang's disruption.
By Alexander Culafi • April 3, 2024 -
Brand Experience Team/TechTarget
XZ backdoor discovery reveals Linux supply chain attack
A maintainer for XZ, a popular open source compression library for Linux distributions, compromised the open source project over the course of two years.
By Rob Wright, Alexander Culafi • April 1, 2024 -
Brand Experience Team/TechTarget
Typosquatting campaign, malicious packages slam PyPI
Threat actors used automated typosquatting attacks to lead victims to malicious python packages in yet another campaign targeting the open-source software supply chain.
By Alexander Culafi • March 29, 2024 -
Brand Experience Team/TechTarget
sensitive information
Sensitive information is data that must be protected from unauthorized access to safeguard the privacy or security of an individual or organization.
By Nick Barney • March 29, 2024 -
Brand Experience Team/TechTarget
Expert Advice // Modern phishing
Microsoft Teams phishing attacks and how to prevent them
Users who think phishing happens only over email should think again. Learn about recent Microsoft Teams phishing attacks and how to defend against them.
By Andrew Froehlich • March 28, 2024 -
Brand Experience Team/TechTarget
Spyware vendors behind 75% of zero-days targeting Google
Google observed 97 zero-day vulnerabilities exploited in the wild last year, which was more than a 50% increase over the 62 exploited zero-day vulnerabilities tracked in 2022.
By Alexander Culafi • March 27, 2024 -
Brand Experience Team/TechTarget
Unpatched flaw in Anyscale’s Ray AI framework under attack
Oligo Security researchers say thousands of Ray servers have been compromised through the flaw, but Anyscale said it has received no reports of exploitation.
By Rob Wright, Arielle Waldman • March 27, 2024 -
Brand Experience Team/TechTarget
Flashpoint observes 84% surge in ransomware attacks in 2023
The threat intelligence vendor anticipates that enterprises will continue to face increases in ransomware activity and data breaches in 2024, with some silver linings ahead.
By Arielle Waldman • March 27, 2024 -
Brand Experience Team/TechTarget
SQL injection vulnerability in Fortinet software under attack
Fortinet and CISA confirmed CVE-2023-48788 is being actively exploited. But the Shadowserver Foundation found that many vulnerable instances remain online.
By Arielle Waldman • March 26, 2024 -
Brand Experience Team/TechTarget
Top.gg supply chain attack highlights subtle risks
Threat actors used fake Python infrastructure and cookie stealing to poison multiple GitHub code repositories, putting another spotlight on supply chain risks.
By Beth Pariseau, Alexander Culafi • March 26, 2024 -
Brand Experience Team/TechTarget
‘GoFetch’ attack spells trouble for Apple M-series chips
Academic researchers discovered a hardware optimization feature called 'data memory-dependent prefetcher' could be abused to extract secret encryption keys from vulnerable systems.
By Rob Wright • March 22, 2024 -
Brand Experience Team/TechTarget
AWS fixes ‘FlowFixation’ vulnerability for account hijacking
A Tenable researcher discovered a session fixation flaw in AWS Managed Workflows for Apache Airflow that, combined with a misconfiguration, could enable account hijacking.
By Alexander Culafi • March 21, 2024 -
Brand Experience Team/TechTarget
NCC Group: Ransomware attacks jump 73% in February
While NCC Group expected an increase in ransomware attacks from January to February, year-over-year data showed just how persistent the threat is to enterprises.
By Arielle Waldman • March 21, 2024 -
Brand Experience Team/TechTarget
CISA urges defensive actions against Volt Typhoon threats
The U.S. cybersecurity agency advised critical infrastructure leaders to adopt several best practices and defensive measures to protect against Chinese state-sponsored attacks.
By Alexander Culafi • March 20, 2024 -
Brand Experience Team/TechTarget
Podcast
Risk & Repeat: Microsoft’s Midnight Blizzard mess
This podcast episode discusses the latest disclosure from Microsoft regarding Midnight Blizzard, which accessed internal systems, source code and some cryptographic secrets.
By Alexander Culafi • March 19, 2024 -
Brand Experience Team/TechTarget
virus (computer virus)
A computer virus is a type of malware that attaches itself to a program or file. A virus can replicate and spread across an infected system and it often propagates to other systems, much like a biological virus spreads from host to host.
By Crystal Bedell, Mike Chapple, Robert Sheldon • March 15, 2024 -
Brand Experience Team/TechTarget
Podcast
Risk & Repeat: CISA hacked via Ivanti vulnerabilities
The compromise of two internal CISA systems comes on the heels of ongoing attacks and developments related to two zero-day vulnerabilities Ivanti disclosed in January.
By Alexander Culafi • March 13, 2024 -
Brand Experience Team/TechTarget
Expert Advice // Top LLM threats and how to defend against them
How data poisoning attacks work
Generative AI brings business opportunities to the enterprise but also security risks. Learn about an evolving attack vector called data poisoning and how it works.
By Rob Shapland • March 13, 2024 -
Brand Experience Team/TechTarget
Expert Advice // Top LLM threats and how to defend against them
4 types of prompt injection attacks and how they work
Compromised LLMs can expose sensitive corporate data and put organizations' reputations at risk. Learn about four types of prompt injection attacks and how they work.
By Rob Shapland • March 13, 2024 -
Brand Experience Team/TechTarget
Sophos: Remote ransomware attacks on SMBs increasing
According to new research from Sophos, small businesses are seeing a rise in threats such as remotely executed ransomware attacks, malvertising, driver abuse and more.
By Alexander Culafi • March 12, 2024 -
Brand Experience Team/TechTarget
LockBit attacks continue via ConnectWise ScreenConnect flaws
Coalition is latest company to confirm LockBit activity against vulnerable ScreenConnect instances. But the insurer found significant differences between previous LockBit attacks.
By Arielle Waldman • March 12, 2024 -
Brand Experience Team/TechTarget
CISA confirms compromise of its Ivanti systems
CISA said that approximately one month ago, it identified 'activity indicating the exploitation of vulnerabilities in Ivanti products the agency uses.'
By Alexander Culafi • March 11, 2024
Previous
