Threats & Vulnerabilities: Page
-
Brand Experience Team/TechTarget
China claims it cracked Apple’s AirDrop, can track senders
The flaw used by Chinese researchers to crack Apple's AirDrop encryption was reported to the company in 2019 by researchers at German university TU Darmstadt.
By Alexander Culafi • Jan. 10, 2024 -
Brand Experience Team/TechTarget
Account hijacking, cryptocurrency scams spread on X
One company that had its account stolen and used for cryptocurrency scams, CertiK, said it was hacked through a phishing attack from a journalist's compromised account.
By Alexander Culafi • Jan. 9, 2024 -
Brand Experience Team/TechTarget
How to fix the top 5 cybersecurity vulnerabilities
Check out how to fix five top cybersecurity vulnerabilities to prevent data loss from poor endpoint security, ineffective network monitoring, weak authentication and other issues.
By Dave Shackleford • Jan. 9, 2024 -
Brand Experience Team/TechTarget
Computer Emergency Response Team (CERT)
A Computer Emergency Response Team (CERT) is a group of information security experts responsible for the protection against, detection of and response to an organization’s cybersecurity incidents.
By Peter Sullivan • Jan. 5, 2024 -
Brand Experience Team/TechTarget
10 of the biggest zero-day attacks of 2023
There were many zero-day vulnerabilities exploited in the wild in 2023. Here's a look at 10 of the most notable and damaging zero-day attacks last year.
By Rob Wright • Jan. 4, 2024 -
Brand Experience Team/TechTarget
December ransomware attacks disrupt healthcare organizations
Two attacks last month exposed the sensitive information of more than 3 million individuals as ransomware attacks continued to disrupt networks and expose private data.
By Arielle Waldman • Jan. 4, 2024 -
Brand Experience Team/TechTarget
Another Barracuda ESG zero-day flaw exploited in the wild
On Christmas Eve, Barracuda disclosed that a China-nexus threat actor had resumed attacks against its Email Security Gateway appliance using a new zero-day vulnerability.
By Arielle Waldman • Dec. 27, 2023 -
Brand Experience Team/TechTarget
10 of the biggest ransomware attacks in 2023
Ransomware attacks against U.S. organizations hit record levels this year as threat actors stepped up extortion tactics and took shaming victims to new levels.
By Arielle Waldman • Dec. 22, 2023 -
Brand Experience Team/TechTarget
Expert Advice // Fuzz testing techniques and tutorials
Web fuzzing: Everything you need to know
Web fuzzing provides automated web application testing, which enables security teams to discover vulnerabilities within web apps before attackers do.
By Rob Shapland • Dec. 21, 2023 -
Brand Experience Team/TechTarget
Zoombombing
Zoombombing is a type of cyber-harassment in which an unwanted and uninvited user or group of such users interrupts online meetings on the Zoom video conference app.
By Corinne Bernstein • Dec. 21, 2023 -
Brand Experience Team/TechTarget
What is the CIA triad (confidentiality, integrity and availability)?
The CIA triad refers to confidentiality, integrity and availability, describing a model designed to guide policies for information security within an organization.
By Wesley Chai, Cameron Hashemi-Pour • Dec. 21, 2023 -
Brand Experience Team/TechTarget
Board preparedness: 7 steps to combat cybersecurity threats
In the face of security breaches, organization board members must urgently tackle real-world cyber threats. These seven steps offer crucial preparedness for companies.
By Amanda Hetler • Dec. 20, 2023 -
Brand Experience Team/TechTarget
FBI leads Alphv/BlackCat takedown, decrypts victims’ data
The latest law enforcement effort to halt the surge of ransomware attacks was successful in disrupting one of the most active ransomware-as-a-service groups.
By Arielle Waldman • Dec. 19, 2023 -
Brand Experience Team/TechTarget
Akamai discloses zero-click exploit for Microsoft Outlook
During research into an older Microsoft Outlook privilege escalation vulnerability, Akamai discovered two new flaws that can be chained for a zero-click RCE exploit.
By Arielle Waldman • Dec. 18, 2023 -
Brand Experience Team/TechTarget
Russian APT exploiting JetBrains TeamCity vulnerability
The Russian hackers behind the SolarWinds attacks are the latest nation-state group to exploit a critical TeamCity vulnerability to gain initial access to victims' servers.
By Arielle Waldman • Dec. 14, 2023 -
Brand Experience Team/TechTarget
Splunk: AI isn’t making spear phishing more effective
While new research shows AI tools won't make it easier for adversaries to conduct successful phishing attacks, social engineering awareness should remain a priority.
By Arielle Waldman • Dec. 14, 2023 -
Brand Experience Team/TechTarget
How ransomware gangs are engaging -- and using -- the media
New Sophos research shows that ransomware groups are not only attacking technical systems, but taking advantage of information systems as well to pressure victims into paying.
By Arielle Waldman • Dec. 13, 2023 -
Brand Experience Team/TechTarget
Forescout uncovers 21 Sierra Wireless router vulnerabilities
Forescout is urging enterprises to patch software for affected OT/IoT routers as attackers increasingly target edge devices to gain network access to critical infrastructure.
By Arielle Waldman • Dec. 6, 2023 -
Brand Experience Team/TechTarget
Exposed Hugging Face API tokens jeopardized GenAI models
Lasso Security discovered more than 1,600 exposed Hugging Face API tokens provided access to generative AI and large-language models contained in hundreds of repositories.
By Rob Wright • Dec. 5, 2023 -
Brand Experience Team/TechTarget
Ransomware ramps up against private sector in November
Ransomware disclosures and reports increased again in November, with the most disruptive and dangerous attacks occurring against healthcare organizations.
By Arielle Waldman • Dec. 5, 2023 -
Brand Experience Team/TechTarget
Fancy Bear hackers still exploiting Microsoft Exchange flaw
Microsoft and Polish Cyber Command warned enterprises that Russian nation-state hackers are exploiting CVE-2023-23397 to gain privileged access to Exchange email accounts.
By Arielle Waldman • Dec. 4, 2023 -
Brand Experience Team/TechTarget
Black Basta ransomware payments exceed $100M since 2022
Insurance provider Corvus and blockchain analytics vendor Elliptic partnered to examine how much damage the Black Basta ransomware group has caused in less than two years.
By Arielle Waldman • Nov. 30, 2023 -
Brand Experience Team/TechTarget
ScamClub spreads fake McAfee alerts to ESPN, AP, CBS sites
Malwarebytes said the malicious affiliate behind the fake virus alerts and other malvertising attacks has been flagged many times over the years, but McAfee has yet to take action.
By Rob Wright • Nov. 30, 2023 -
Brand Experience Team/TechTarget
Europol, Ukraine police arrest alleged ransomware ringleader
Europol and Ukraine's National Police arrested the alleged leader of a ransomware gang last week, along with four accomplices, dismantling the cybercrime group.
By Arielle Waldman • Nov. 28, 2023 -
Brand Experience Team/TechTarget
data sovereignty
Data sovereignty is the concept that information that has been generated, processed, converted and stored in binary digital form is subject to the laws of the country in which it was generated.
By Paul Kirvan • Nov. 28, 2023
Previous
