Threats & Vulnerabilities: Page
-
Brand Experience Team/TechTarget
Midnight Blizzard accessed Microsoft systems, source code
Microsoft said Midnight Blizzard used data stolen from a breach of its corporate email system to access other parts of the company's network, including source code repositories.
By Alexander Culafi • March 8, 2024 -
Brand Experience Team/TechTarget
Change Healthcare cyberattack news updates
The Change Healthcare attack: Explaining how it happened
Change Healthcare was hit with a ransomware attack from BlackCat/ALPHV after its systems were disrupted. Keep reading to learn more about this attack and how others are affected.
By Sean Kerner • March 8, 2024 -
Brand Experience Team/TechTarget
Former Google engineer charged with stealing AI trade secrets
Linwei Ding, a Chinese national, allegedly evaded Google's data loss prevention systems and stole confidential information to start his own China-based AI company.
By Arielle Waldman • March 7, 2024 -
Brand Experience Team/TechTarget
Apple discloses 2 iOS zero-day vulnerabilities
CVE-2024-23225 and CVE-2024-23296, which bypass kernel memory protections, mark the second and third zero-day vulnerabilities that Apple has disclosed and patched this year.
By Alexander Culafi • March 6, 2024 -
Brand Experience Team/TechTarget
Alphv/BlackCat leak site goes down in possible exit scam
An Alphv/BlackCat affiliate accused the ransomware gang of stealing a ransom payment worth more than $20 million that may have been obtained in the Change Healthcare attack.
By Alexander Culafi • March 5, 2024 -
Brand Experience Team/TechTarget
Critical JetBrains TeamCity vulnerabilities under attack
Exploitation activity has started against two vulnerabilities in JetBrains TeamCity, which has been targeted previously by nation-state threat actors such as Russia's Cozy Bear.
By Arielle Waldman • March 5, 2024 -
Brand Experience Team/TechTarget
Inside an Alphv/BlackCat ransomware attack
Sygnia researchers investigated an intrusion in a client's network and discovered an Alphv/BlackCat ransomware actor had been lurking in the environment for weeks.
By Rob Wright • March 5, 2024 -
Brand Experience Team/TechTarget
Expert Advice // All about DDoS attacks
DoS vs. DDoS: How they differ and the damage they cause
DoS and DDoS attacks may not be new, but that doesn't mean they are any less disruptive to organizations. Companies should understand what they are and how they work.
By Ravi Das • March 5, 2024 -
Brand Experience Team/TechTarget
Infosec pros weigh in on proposed ransomware payment bans
Whether for or against a payment ban, security professionals are concerned regulations could negatively affect victims and result in fewer incident disclosures.
By Arielle Waldman • March 4, 2024 -
Brand Experience Team/TechTarget
LockBit, Alphv/BlackCat highlight February ransomware activity
With events surrounding the LockBit and Alphv/BlackCat gangs and the ConnectWise ScreenConnect flaws, ransomware activity continues this year after a surge in 2023.
By Alexander Culafi • March 4, 2024 -
Brand Experience Team/TechTarget
CISA warns Ivanti ICT ineffective for detecting compromises
CISA observed ongoing exploitation against four Ivanti vulnerabilities and found problems with the vendor's Integrity Checker Tool, which is designed to detect compromises.
By Arielle Waldman • Feb. 29, 2024 -
Brand Experience Team/TechTarget
Alphv/BlackCat attacking hospitals following FBI takedown
The ransomware attacks against hospitals and the healthcare sector come after law enforcement agencies, led by the FBI, disrupted Alphv/BlackCat's network in December.
By Alexander Culafi • Feb. 28, 2024 -
Brand Experience Team/TechTarget
Ransomware gangs exploiting ConnectWise ScreenConnect flaws
Ransomware activity is ramping up against vulnerable ScreenConnect systems as Black Basta and Bl00dy threat actors were observed exploiting the vulnerabilities.
By Arielle Waldman • Feb. 27, 2024 -
Brand Experience Team/TechTarget
OpenSSL
OpenSSL is an open source cryptographic toolkit that facilitates secure communications between endpoints on a network.
By Robert Sheldon • Feb. 27, 2024 -
Brand Experience Team/TechTarget
LockBit restores servers following law enforcement takedown
Law enforcement agencies last week announced a takedown of the LockBit ransomware gang that involved the seizure of servers, websites and decryption keys, as well as two arrests.
By Alexander Culafi • Feb. 26, 2024 -
Brand Experience Team/TechTarget
CISA: APT29 targeting cloud accounts for initial access
U.K. and U.S. government agencies have observed the Russian nation-state group increasingly target dormant and inactive cloud service accounts to gain initial access.
By Arielle Waldman • Feb. 26, 2024 -
Brand Experience Team/TechTarget
ConnectWise ScreenConnect flaws under attack, patch now
Huntress said in a blog post this week that the ConnectWise ScreenConnect flaws, which have come under attack, were 'trivial and embarrassingly easy' for a threat actor to exploit.
By Alexander Culafi • Feb. 22, 2024 -
Brand Experience Team/TechTarget
Coalition: Vulnerability scoring systems falling short
Coalition said enterprises faced more substantial fallout from attacks on Citrix Bleed and Progress Software's MoveIt Transfer due to inadequate vulnerability prioritization.
By Arielle Waldman • Feb. 21, 2024 -
Brand Experience Team/TechTarget
CrowdStrike ‘Global Threat Report’: Cloud intrusions up 75%
This year's report covered cloud intrusions, data extortion attacks, and the ongoing conflict between Israel and Hamas.
By Alexander Culafi • Feb. 21, 2024 -
Brand Experience Team/TechTarget
Operation Cronos dismantles LockBit ransomware gang
An international law enforcement operation led by the U.K.'s National Crime Agency seizes LockBit's websites, servers, source code and decryption keys.
By Rob Wright • Feb. 20, 2024 -
Brand Experience Team/TechTarget
Ransomware disrupts utilities, infrastructure in January
Ransomware attacks last month caused outages and disruptions at public sector and critical infrastructure organizations as well as a major financial services firm.
By Arielle Waldman • Feb. 15, 2024 -
Brand Experience Team/TechTarget
Eclypsium: Ivanti firmware has ‘plethora’ of security issues
In its firmware analysis, Eclypsium found that the Ivanti Pulse Secure appliance used a version of Linux that was more than a decade old and several years past end of life.
By Alexander Culafi • Feb. 15, 2024 -
Brand Experience Team/TechTarget
Microsoft, OpenAI warn nation-state hackers are abusing LLMs
Microsoft and OpenAI observed five nation-state threat groups leveraging generative AI and large language models for social engineering, vulnerability research and other tasks.
By Arielle Waldman • Feb. 14, 2024 -
Brand Experience Team/TechTarget
Iranian cyberattacks targeting U.S. and Israeli entities
Google said Tuesday that state-backed Iranian actors targeted the U.S. and Israel consistently in the years prior to the start of the Israel-Hamas war as well as the months after.
By Alexander Culafi • Feb. 14, 2024 -
Brand Experience Team/TechTarget
Proofpoint: ‘Hundreds’ of Azure accounts compromised
Proofpoint researchers found that the attackers manipulated the MFA of compromised accounts, registering their own methods to maintain persistent access.
By Rob Wright • Feb. 13, 2024
Previous
