Threats & Vulnerabilities: Page

timing attack

A timing attack is a type of side-channel attack that exploits the amount of time a computer process runs to gain knowledge about or access a system.

By Gavin Wright • Nov. 28, 2023

Threat actors targeting critical OwnCloud vulnerability

Researchers observed exploitation attempts against a vulnerability affecting OwnCloud's Graph API app, highlighting threat actors' continued focus on file-sharing products.

By Arielle Waldman • Nov. 27, 2023

CISA, FBI warn of LockBit attacks on Citrix Bleed

The latest advisory on exploitation of the Citrix Bleed vulnerability confirmed that the LockBit ransomware group perpetrated the attack on Boeing.

By Arielle Waldman • Nov. 21, 2023

An introduction to IoT penetration testing

IoT systems are complex, and that makes checking for vulnerabilities a challenge. Penetration testing is one way to ensure your IoT architecture is safe from cyber attacks.

By Laura Vegh • Nov. 17, 2023

CISA, FBI issue alert for ongoing Scattered Spider activity

The government advisory follows several high-profile attacks attributed to Scattered Spider, which uses advanced social engineering techniques like SIM swapping.

By Arielle Waldman • Nov. 16, 2023

Alphv ransomware gang claims it reported MeridianLink to SEC

MeridianLink said it recently identified a "cybersecurity incident," but the Alphv ransomware gang claims it breached the company and compromised customer data.

By Alexander Culafi • Nov. 16, 2023

Automated Clearing House fraud (ACH fraud)

ACH fraud is the theft of funds through the U.S. Department of the Treasury's Automated Clearing House financial transaction network.

By Rahul Awati • Nov. 16, 2023

LockBit observed exploiting critical ‘Citrix Bleed’ flaw

The Financial Services Information Sharing and Analysis Center warned that LockBit ransomware actors are exploiting CVE-2023-4966, also known as Citrix Bleed.

By Arielle Waldman • Nov. 15, 2023

VMware discloses critical, unpatched Cloud Director bug

A manual workaround is currently available for a critical VMware Cloud Director Appliance flaw, tracked as CVE-2023-34060, but no patch is available at press time.

By Alexander Culafi • Nov. 15, 2023

Cryptocurrency wallets might be vulnerable to ‘Randstorm’ flaw

Cryptocurrency recovery company Unciphered discovered a vulnerability in a JavaScript Bitcoin library that could jeopardize private keys.

By Arielle Waldman • Nov. 14, 2023

LockBit ransomware gang claims it leaked stolen Boeing data

Boeing confirmed that it experienced a cybersecurity incident following LockBit's claims, but the aircraft manufacturer has not directly confirmed a ransomware attack.

By Alexander Culafi • Nov. 13, 2023

Lace Tempest exploits SysAid zero-day vulnerability

SysAid urged users to patch a zero-day vulnerability in its on-premises software, which is being exploited by the threat actor behind the MoveIt Transfer ransomware attacks.

By Arielle Waldman • Nov. 9, 2023

SolarWinds fires back at SEC over fraud charges

SolarWinds said the SEC's lawsuit contains several 'false claims,' including allegations about how Russian nation-state hackers first got inside the company's network

By Rob Wright • Nov. 9, 2023

FBI: Ransomware actors hacking casinos via third parties

A new Private Industry Notification focuses on ransomware trends involving attacks against casinos as well as a callback phishing campaign perpetrated by the Luna Moth gang.

By Alexander Culafi • Nov. 8, 2023

Atlassian Confluence vulnerability under widespread attack

Atlassian's Confluence Data Center and Server products are under attack again as reports of widespread exploitation roll in just days after CVE-2023-22518 was publicly disclosed.

By Arielle Waldman • Nov. 8, 2023

dark web monitoring

Dark web monitoring is the process of searching for and continuously tracking information on the dark web.

By Ben Lutkevich • Nov. 7, 2023

Ransomware continues to rise in October across all sectors

Ransomware disclosures and reports surged last month, leading in some cases to bankruptcy filing, prolonged business disruptions and ambulance diversions for hospitals.

By Arielle Waldman • Nov. 6, 2023

SolarWinds hack explained: Everything you need to know

Hackers targeted SolarWinds by deploying malicious code into its Orion IT monitoring and management software used by thousands of enterprises and government agencies worldwide.

By Saheed Oladimeji, Sean Michael Kerner • Nov. 3, 2023

Zscaler finds 117 Microsoft 365 bugs via SketchUp 3D file type

Microsoft published patches to address all 117 Microsoft 365 Apps flaws disclosed Tuesday, and the tech giant has disabled support for SketchUp, or SKP, 3D model files.

By Alexander Culafi • Nov. 2, 2023

No patches yet for Apple iLeakage side-channel attack

Apple said it is working on more complete fixes for the iLeakage side-channel attack technique, but only one partial mitigation is currently available to macOS customers.

By Alexander Culafi • Oct. 31, 2023

SEC charges SolarWinds for security failures, fraud

The SEC accused SolarWinds and CISO Timothy Brown of hiding known cybersecurity risks that were further highlighted by the supply chain attack revealed in 2020.

By Arielle Waldman • Oct. 31, 2023

Dual ransomware attacks on the rise, but causes are unclear

While the FBI warned enterprises of an increase in dual ransomware attacks, infosec experts said there's insufficient data to consider the threat a trend.

By Arielle Waldman • Oct. 31, 2023

NCC Group details 153% spike in September ransomware attacks

NCC Group analysts warned the significant year-over-year increase will likely continue. Organizations may see 4,000 ransomware attacks by the end of 2023.

By Arielle Waldman • Oct. 26, 2023

Cisco IOS XE instances still under attack, patch now

In the days since Cisco's initial disclosure, the networking giant found a second Cisco IOS XE zero-day as well as new evasion techniques being utilized by threat actors.

By Alexander Culafi • Oct. 24, 2023

Plundervolt

Plundervolt is the name of an undervolting attack that targeted Intel central processing units (CPUs).

By Ben Lutkevich • Oct. 24, 2023