Threats & Vulnerabilities: Page

Okta customer support system breached via stolen credentials

During the latest breach against the identity and access management vendor, attackers took advantage of the system intended to provide support for Okta customers.

By Arielle Waldman • Oct. 23, 2023

North Korean hackers exploit critical TeamCity vulnerability

While a patch is available, Microsoft and JetBrains confirmed TeamCity users have been compromised in attacks that leverage CVE-2023-42793 as an initial attack vector.

By Arielle Waldman • Oct. 19, 2023

Mandiant: Citrix zero-day actively exploited since August

Exploitation against CVE-2023-4966 is ongoing, and Mandiant CTO Charles Carmakal warned patching alone is insufficient against potential attacks that leverage MFA bypass techniques.

By Arielle Waldman • Oct. 18, 2023

Cisco IOS XE zero-day facing mass exploitation

VulnCheck said its public scanning for CVE-2023-20198 revealed that 'thousands' of internet-facing Cisco IOS XE systems have been compromised with malicious implants.

By Alexander Culafi • Oct. 17, 2023

10 cybersecurity experts to follow on social media

Cybersecurity experts provide valuable insights into the security landscape. Follow this curated list of recognized authorities to stay informed and safeguard your digital assets.

By Kinza Yasar • Oct. 17, 2023

SEO poisoning (search poisoning)

SEO poisoning, also known as 'search poisoning,' is a type of malicious advertising (malvertising) in which cybercriminals create malicious websites and then use search engine optimization (SEO) techniques to cause the sites' links to show up prominently in search results, often as ads at the top of the results.

By Robert Sheldon • Oct. 16, 2023

Cisco working on fix for critical IOS XE zero-day

Cisco designated the bug, CVE-2023-20198, with a CVSS score of 10 and said it was working on a patch, but advised customers to apply mitigations in the meantime.

By Alexander Culafi • Oct. 16, 2023

Ransomware gang targets critical Progress WS_FTP Server bug

The vulnerability used in the failed ransomware attack, CVE-2023-40044, is a .NET deserialization vulnerability in Progress Software's WS_FTP Server with a CVSS score of 10.

By Alexander Culafi • Oct. 13, 2023

‘Rapid Reset’ DDoS attacks exploiting HTTP/2 vulnerability

Cloudflare said the Rapid Reset DDoS attack was three times larger than the attack it had on record. Google similarly called it 'the largest DDoS attack to date.'

By Alexander Culafi • Oct. 10, 2023

MGM faces $100M loss from ransomware attack

MGM's 8-K filing revealed some personal customer data was stolen during the September attack and said the company expects cyber insurance to sufficiently cover the losses.

By Arielle Waldman • Oct. 6, 2023

Critical Atlassian Confluence zero-day flaw under attack

Collaboration software vendor Atlassian urged customers with affected versions of Confluence Data Center and Server to apply patches for CVE-2023-22515 immediately.

By Alexander Culafi • Oct. 4, 2023

Spyware vendor exploiting kernel flaw in Arm Mali GPU drivers

Arm Mali GPUs affected by CVE-2023-4211, which was discovered by Google researchers, include a wide range of Android phones as well as ChromeOS devices such as Chromebooks.

By Alexander Culafi • Oct. 3, 2023

Ransomware disrupts hospitality, healthcare in September

Ransomware disclosures and reports last month were headlined by attacks on MGM Resorts and Caesars Entertainment, which proved costly to the Las Vegas hospitality giants.

By Arielle Waldman • Oct. 3, 2023

Openwall patches 3 of 6 Exim zero-day flaws

The Openwall Project urged users to upgrade to the latest version of Exim, but there have been timely patching struggles with the message transfer agent software in the past.

By Arielle Waldman • Oct. 2, 2023

voice squatting

Voice squatting is an attack vector for voice user interfaces, or VUIs, that exploits homonyms -- words that sound the same, but are spelled differently -- and input errors -- words that are mispronounced.

By Alexander Gillis • Oct. 2, 2023

5 common browser attacks and how to prevent them

Browsers are critical components of any organization, especially with the rise of web apps. Security teams and users must, therefore, know how to avoid common browser attacks.

By Ravi Das • Sept. 29, 2023

US, Japan warn China-linked ‘BlackTech’ targeting routers

CISA said BlackTech has targeted Cisco and other router makers by using a variety of tools and techniques to modify and even replace devices' firmware.

By Alexander Culafi • Sept. 28, 2023

Cisco patches zero-day vulnerability under attack

Cisco said its Advanced Security Initiatives Group discovered the zero-day flaw while investigating attempted attacks on the vendor's Group Encrypted Transport VPN feature.

By Arielle Waldman • Sept. 28, 2023

Clop MoveIt Transfer attacks affect over 2,000 organizations

According to research by security vendor Emsisoft, 2,095 organizations and 62,054,613 individuals have been affected by the Clop gang's attacks on MoveIt Transfer customers.

By Alexander Culafi • Sept. 26, 2023

Dallas doles out $8.5M to remediate May ransomware attack

The city of Dallas provided a detailed attack timeline that showed Royal threat actors compromised a service account a month before ransomware was deployed.

By Arielle Waldman • Sept. 25, 2023

Apple issues emergency patches for 3 zero-day bugs

Apple said CVE-2023-41992, CVE-2023-41991 and CVE-2023-41993 -- all reported by Citizen Lab and Google researchers -- might have been exploited against versions of iOS before 16.7.

By Alexander Culafi • Sept. 22, 2023

Okta: Caesars, MGM hacked in social engineering campaign

Identity management vendor Okta had previously disclosed that four unnamed customers had fallen victim to a social engineering campaign that affected victims' MFA protections.

By Alexander Culafi • Sept. 20, 2023

Cyber insurance report shows surge in ransomware claims

Coalition's H1 2023 report shows ransomware activity increased and severity reached "historic" highs as businesses lost an average of more than $365,000 following an attack.

By Arielle Waldman • Sept. 20, 2023

How to invest in ESG: Ethical investing explained

ESG and ethical investing are not new terms but have become more popular as climate change and new emissions data disclosure laws loom for American companies.

By Ben Lutkevich • Sept. 19, 2023

Microsoft AI researchers mistakenly expose 38 TB of data

Microsoft said no customer data was affected by the Azure Storage exposure and 'no other internal services were put at risk because of this issue,' which has been mitigated.

By Alexander Culafi • Sept. 18, 2023