Threats & Vulnerabilities: Page
-
Brand Experience Team/TechTarget
CISA warns Fortinet zero-day vulnerability under attack
CISA alerted federal agencies that a critical zero-day vulnerability in FortiOS is being actively exploited, though Fortinet has yet to confirm reports.
By Arielle Waldman • Feb. 12, 2024 -
Brand Experience Team/TechTarget
A who’s who of cybercrime investigators
Cybercrime investigations are more than just first response. Learn about the patchwork of organizations that work together to combat international cybercrime.
By Ben Lutkevich • Feb. 9, 2024 -
Brand Experience Team/TechTarget
cyberterrorism
Cyberterrorism is usually defined as any premeditated, politically motivated attack against information systems, programs, and data that threatens violence or results in violence.
By Katie Terrell Hanna, Rahul Awati, Robert Sheldon • Feb. 9, 2024 -
Brand Experience Team/TechTarget
NCC Group records the most ransomware victims ever in 2023
Enterprises faced an alarming number of ransomware attacks as gangs targeted supply chains and took advantage of zero-day vulnerabilities and organizations' patching struggles.
By Arielle Waldman • Feb. 8, 2024 -
Brand Experience Team/TechTarget
CISA: Volt Typhoon had access to some U.S. targets for 5 years
A joint cybersecurity advisory expanded on the Volt Typhoon threat Wednesday, confirming attackers maintained prolonged persistent access to critical infrastructure targets.
By Arielle Waldman • Feb. 7, 2024 -
Brand Experience Team/TechTarget
Chainalysis: 2023 a ‘watershed’ year for ransomware
Chainalysis said ransomware payments ballooned to reach $1.1 billion in 2023, marking a complete reversal from the decline in ransomware payments seen the year prior.
By Alexander Culafi • Feb. 7, 2024 -
Brand Experience Team/TechTarget
keylogger (keystroke logger or system monitor)
A keylogger, sometimes called a keystroke logger, is a type of surveillance technology used to monitor and record each keystroke on a specific device, such as a computer or smartphone.
By Alexander Gillis, Rahul Awati • Feb. 7, 2024 -
Brand Experience Team/TechTarget
Google: Spyware vendors are driving zero-day exploitation
Google's Threat Analysis Group urged further government action against commercial surveillance vendors that let customers abuse spyware products with impunity.
By Arielle Waldman • Feb. 6, 2024 -
Brand Experience Team/TechTarget
dictionary attack
A dictionary attack is a method of breaking into a password-protected computer, network or other IT resource by systematically entering every word in a dictionary, or word list, as a password.
By Gavin Wright • Feb. 6, 2024 -
Brand Experience Team/TechTarget
AnyDesk hacked, details unclear
Of the hack, AnyDesk said it found 'no evidence that any end-user devices have been affected.' But researchers said they saw AnyDesk customer credentials for sale on the dark web.
By Alexander Culafi • Feb. 5, 2024 -
Brand Experience Team/TechTarget
Critical infrastructure hacks raise alarms on Chinese threats
FBI Director Christopher Wray and CISA Director Jen Easterly warned that China was targeting critical infrastructure for possible destructive attacks in the event of a conflict with the United States.
By Alexander Culafi • Feb. 1, 2024 -
Brand Experience Team/TechTarget
CISA deputy director touts progress, anti-ransomware efforts
In this Q&A, CISA Deputy Director Nitin Natarajan shares his thoughts on scaling up to meet high demand, the agency's new initiative to address ransomware and more.
By Alexander Culafi • Feb. 1, 2024 -
Brand Experience Team/TechTarget
Corvus: 2023 was a ‘record-breaking’ ransomware year
The insurance company analyzed claims data and ransomware gangs' data leak sites, which suggests as many as 7,600 organizations across the globe were attacked in 2023.
By Arielle Waldman • Jan. 30, 2024 -
Brand Experience Team/TechTarget
Citizen Lab details ongoing battle against spyware vendors
At the SANS Cyber Threat Intelligence Summit, Citizen Lab researcher Bill Marczak discusses spyware proliferation from commercial vendors such as NSO Group, Cytrox and Quadream.
By Arielle Waldman • Jan. 29, 2024 -
Brand Experience Team/TechTarget
HPE breached by Russian APT behind Microsoft hack
HPE suspects that Cozy Bear, a Russian state-sponsored threat actor also known as Midnight Blizzard and Nobelium, breached its network twice in 2020.
By Alexander Culafi • Jan. 25, 2024 -
Brand Experience Team/TechTarget
NCSC says AI will increase ransomware, cyberthreats
While other threats are likely to increase as well, the U.K.'s National Cyber Security Centre warns that threat actors will use AI to continue the influx of ransomware attacks.
By Arielle Waldman • Jan. 24, 2024 -
Brand Experience Team/TechTarget
Attacks begin on critical Atlassian Confluence vulnerability
Exploitation activity for CVE-2023-22527 marks the third time in four months that a critical Atlassian Confluence flaw has gained threat actors' attention.
By Arielle Waldman • Jan. 23, 2024 -
Brand Experience Team/TechTarget
Microsoft breached by Russian APT behind SolarWinds attack
Several email accounts belonging to Microsoft senior leadership were accessed as part of the breach, though Microsoft found 'no evidence' of customer environments being accessed.
By Alexander Culafi • Jan. 22, 2024 -
Brand Experience Team/TechTarget
Chinese threat group exploited VMware vulnerability in 2021
After VMware confirmed that CVE-2023-34048 had been exploited, Mandiant attributed the activity to a China-nexus threat group and revealed that exploitation began in late 2021.
By Arielle Waldman • Jan. 19, 2024 -
Brand Experience Team/TechTarget
security incident
A security incident is an event that could indicate that an organization's systems or data have been compromised or that security measures put in place to protect them have failed.
By Ivy Wigmore, Kinza Yasar, Mary Shacklett • Jan. 19, 2024 -
Brand Experience Team/TechTarget
Chainalysis observes decrease in cryptocurrency crime in 2023
During 2023, Chainalysis tracked a decrease in the total value and volume of illicit cryptocurrency transactions. But it is unclear if the downward trend will continue.
By Arielle Waldman • Jan. 18, 2024 -
Brand Experience Team/TechTarget
New zero-days in Citrix NetScaler ADC, Gateway under attack
The new vulnerabilities come four months after a variety of threat actors exploited the 'Citrix Bleed' zero-day flaw in NetScaler ADC and Gateway products.
By Rob Wright • Jan. 17, 2024 -
Brand Experience Team/TechTarget
Google, researchers in dispute over account hijacking attacks
Google disputes aspects of threat research that CloudSEK published last month claiming threat actors are maintaining persistence after hijacking Google user accounts.
By Alexander Culafi • Jan. 17, 2024 -
Brand Experience Team/TechTarget
Ivanti zero-day flaws under ‘widespread’ exploitation
Volexity confirmed that multiple threat actors have exploited two critical Ivanti zero-day vulnerabilities, with 1,700 devices compromised so far.
By Arielle Waldman • Jan. 16, 2024 -
Brand Experience Team/TechTarget
Ivanti confirms 2 zero-day vulnerabilities are under attack
Volexity reported the vulnerabilities to Ivanti after discovering that suspected Chinese nation-state threat actors created an exploit chain to achieve remote code execution.
By Arielle Waldman • Jan. 11, 2024
Previous
