Threats & Vulnerabilities: Page

CISA details backdoor malware used in Barracuda ESG attacks

CISA said Friday that 'Submarine' is a novel persistent backdoor used in attacks against Barracuda Email Security Gateway appliances vulnerable to CVE-2023-2868.

By Alexander Culafi • July 31, 2023

Google: 41 zero-day vulnerabilities exploited in 2022

While attackers increasingly exploited zero-day flaws last year, one of the most notable findings from the report emphasized how inadequate patches led to new variants.

By Arielle Waldman • July 27, 2023

Ivanti EPMM zero-day vulnerability exploited in wild

A zero-day authentication bypass vulnerability in Ivanti Endpoint Manager Mobile was exploited in a cyber attack against a Norwegian government agency.

By Alexander Culafi • July 25, 2023

Coveware: Rate of victims paying ransom continues to plummet

Incident response firm Coveware said 34% of ransomware victims paid the ransom in Q2 2023, a sharp decline from last quarter and an enormous decline from 2020 and 2019.

By Alexander Culafi • July 24, 2023

Microsoft to expand free cloud logging following recent hacks

Microsoft faced criticism over a lack of free cloud log data after a China-based threat actor compromised email accounts of several organizations, including some federal agencies.

By Rob Wright • July 19, 2023

Citrix NetScaler ADC and Gateway flaw exploited in the wild

Critical remote code execution flaw CVE-2023-3519 was one of three vulnerabilities in Citrix's NetScaler ADC and Gateway. Customers are urged to patch their instances.

By Alexander Culafi • July 19, 2023

Multiple Adobe ColdFusion flaws exploited in the wild

One of the Adobe ColdFusion flaws exploited in the wild, CVE-2023-38203, was a zero-day bug that security vendor Project Discovery inadvertently published.

By Alexander Culafi • July 18, 2023

Supercloud security concerns foreshadow concept’s adoption

Supercloud lets applications work together across multiple cloud environments, but organizations must pay particular attention to how they protect their assets.

By Dave Shackleford • July 18, 2023

Orca: Google Cloud design flaw enables supply chain attacks

Orca Security says threat actors can use a design flaw in Google Cloud Build's default permissions to gain access to Artifact Registry code repositories and poison software.

By Alexander Culafi • July 18, 2023

JumpCloud breached by nation-state threat actor

JumpCloud's mandatory API key rotation earlier this month was triggered by a breach at the hands of a nation-state threat actor that gained access through spear phishing.

By Rob Wright • July 17, 2023

XSS zero-day flaw in Zimbra Collaboration Suite under attack

A manual workaround is currently available for a cross-site scripting vulnerability in Zimbra Collaboration Suite, though a patch won't be available until later this month.

By Alexander Culafi • July 14, 2023

Microsoft: Government agencies breached in email attacks

While Microsoft mitigated the attacks and found no evidence of further access beyond the email accounts, the Outlook breaches raised questions for the software giant.

By Arielle Waldman • July 13, 2023

Threat actors forged Windows driver signatures via loophole

Threat actors bypassed Microsoft's driver signing policy using a technical loophole and signature timestamp forging tools commonly used in the video game cheat community.

By Alexander Culafi • July 12, 2023

Russia-based actor exploited unpatched Office zero day

Microsoft investigated an ongoing phishing campaign that leverages Word documents to deliver malicious attachments to targeted organizations in the U.S. and Europe.

By Arielle Waldman • July 12, 2023

Clop’s MoveIt Transfer attacks lead to mixed results

Clop's data theft extortion campaign against MoveIt Transfer customers has apparently compromised hundreds of organizations. But it's unclear how many victims have paid ransoms.

By Alexander Culafi • July 11, 2023

5 considerations for selecting rugged devices for IoT

End users who work outside of traditional office settings often need ruggedized devices. Organizations should tailor devices to the environment and users' needs.

By Mary Shacklett • July 7, 2023

Pros and cons of cryptocurrency

Cryptocurrency benefits include decentralization, lower transaction fees and inflation protection. But it also comes with some challenges.

By Kinza Yasar • July 7, 2023

CISA: Truebot malware infecting networks in U.S., Canada

CISA warned of Truebot attacks in a joint advisory alongside the FBI, the Canadian Centre for Cyber Security and the Multi-State Information Sharing and Analysis Center.

By Alexander Culafi • July 6, 2023

June saw flurry of ransomware attacks on education sector

As the school year culminated, ransomware attacks surged across K-12 schools and universities, causing class disruptions and putting sensitive data at risk.

By Arielle Waldman • July 5, 2023

TSMC partner breached by LockBit ransomware gang

A cyber attack against Chinese systems integrator Kinmax led to the theft of TSMC proprietary data, which LockBit threatened to publish unless TSMC paid a $70 million ransom.

By Alexander Culafi • June 30, 2023

DDoS attacks surging behind new techniques, geopolitical goals

A rise in massive DDoS attacks, some of which target the application layer and cause significant disruptions, might require new defense strategies from cybersecurity vendors.

By Arielle Waldman • June 28, 2023

Censys finds hundreds of exposed devices in federal orgs

Censys found exposed instances of Progress Software's MoveIt Transfer and Barracuda Networks' Email Security Gateway appliances during its analysis of FCEB agency networks.

By Alexander Culafi • June 27, 2023

Occupational Safety and Health Administration (OSHA)

The Occupational Safety and Health Administration (OSHA) is responsible for protecting worker health and safety in the United States.

By Katie Terrell Hanna • June 27, 2023

Apple patches zero days used in spyware attacks on Kaspersky

Two Apple zero days were used in the spyware campaign Kaspersky Lab named 'Operation Triangulation,' which was initially discovered on iOS devices of Kaspersky employees.

By Arielle Waldman • June 22, 2023

Critical VMware Aria Operations bug under active exploitation

Reports of exploitation for a critical command injection flaw in VMware Aria Operations for Networks came roughly a week after a researcher published a proof-of-concept for it.

By Alexander Culafi • June 21, 2023