Threats & Vulnerabilities: Page

Experts question San Bernardino’s $1.1M ransom payment

While no public safety services were compromised in the ransomware attack on San Bernardino County's Sheriff's Department, the government opted to $1.1 million to threat actors.

By Alexis Zacharakos • May 12, 2023

Dragos discloses blocked ransomware attack, extortion attempt

Dragos Inc. published a blog post that outlined a likely ransomware attack it stopped this week, though a threat actor obtained 'general use data' for new hires.

By Arielle Waldman • May 10, 2023

Akamai bypasses mitigation for critical Microsoft Outlook flaw

Enterprises might remain vulnerable to a critical Outlook flaw that Microsoft patched in March, as an Akamai researcher uncovered a way to bypass remediation efforts.

By Arielle Waldman • May 10, 2023

juice jacking

Juice jacking is a security exploit in which an infected USB charging station is used to compromise devices that connect to it.

By Laura Fitzgibbons • May 9, 2023

Western Digital confirms ransomware actors stole customer data

Western Digital issued an update late Friday that confirmed customer data was stolen in an attack for which Alphv ransomware actors claimed responsibility.

By Arielle Waldman • May 8, 2023

Former Uber CSO Joe Sullivan avoids jail for breach cover-up

A U.S. district judge sentenced former Uber security chief Joe Sullivan to three years of probation and 200 hours of community service for his role in the 2016 breach cover-up.

By Alexander Culafi • May 5, 2023

Ransomware attack disrupts Dallas police, city services

The city said less than 200 government devices were compromised by the Royal ransomware attack, though it's unclear if threat actors exfiltrated sensitive data.

By Alexis Zacharakos • May 4, 2023

Ransomware gangs display ruthless extortion tactics in April

Ransomware groups are pressuring enterprises into paying with harsher extortion tactics, contacting individual victims directly and leaking stolen photos and video footage.

By Arielle Waldman • May 4, 2023

Studies show ransomware has already caused patient deaths

No patient deaths have been definitively attributed to cyber attacks on hospitals, but some infosec experts say that statistical evidence shows a different, grim reality.

By Alexis Zacharakos • May 3, 2023

CrowdStrike focuses on ChromeOS security, rising cloud threats

Raj Rajamani, CrowdStrike's chief product officer of data, identity, cloud and endpoint security, said ChromeOS devices are gaining increasing adoption in the enterprise space.

By Alexander Culafi • May 2, 2023

CISA aims to reduce email threats with serial CDR prototype

CISA officials at RSA Conference 2023 showed off a prototype designed to measure the risk of suspicious files and remove them from email and web services.

By Arielle Waldman • April 26, 2023

TrickBot malware

TrickBot is sophisticated modular malware that started as a banking Trojan but has evolved to support many different types of attacks, including ransomware.

By Alexander Gillis • April 26, 2023

RSAC panel warns AI poses unintended security consequences

A panel of experts at RSA conference 2023 warned of hallucinations and inherent biases but also said generative AI can assist in incident response and other security needs.

By Arielle Waldman • April 26, 2023

RSAC speaker offers ransomware victims unconventional advice

Triton Tech Consulting CEO Brandon Clark advised organizations to set aside the stigma of 'negotiating with terrorists' when deciding whether to pay a ransomware gang.

By Alexis Zacharakos • April 25, 2023

Google, Mandiant highlight top threats, evolving adversaries

Enterprises are struggling to keep up as adversary groups improve tactics. But one of the most difficult groups to defend against, according to Google and Mandiant, was a surprise.

By Arielle Waldman • April 25, 2023

DOJ’s Monaco addresses ‘misperception’ of Joe Sullivan case

In her RSA Conference keynote, Deputy Attorney General Lisa Monaco was asked if the prosecution of former Uber CSO Joe Sullivan damaged trust with the private sector.

By Rob Wright • April 25, 2023

DC Health Link breach caused by misconfigured server

Mila Kofman, executive director of the District of Columbia Health Benefit Exchange Authority, blames "human error" for the DC Health Link breach.

By Alexander Culafi • April 20, 2023

Mandiant: 3CX breach caused by second supply chain attack

Trading Technologies said in a statement it had 'not had the ability to verify the assertions in Mandiant's report' that its software played a role in the 3CX supply chain attack.

By Alexander Culafi • April 20, 2023

Point32Health confirms service disruption due to ransomware

A ransomware attack interrupted access to services provided by one of New England's largest healthcare insurers, though the scope of affected customers and data remains unknown.

By Arielle Waldman • April 19, 2023

Standardized data collection methods can help fight cybercrime

Implementing standards similar to NERC CIP for the entire cybersecurity industry could make it easier for law enforcement to investigate and prosecute cyber attackers.

By Juan Vargas • April 18, 2023

Mandiant: 63% of breaches were discovered externally in 2022

Mandiant said the 2022 increase is most likely affected by the threat intelligence firm proactively investigating threat activity targeting Ukraine last year.

By Alexander Culafi • April 18, 2023

Western Digital restores service; attack details remain unclear

While Western Digital confirmed that it suffered a data breach on March 26, the storage company has not offered details about the attack scope or whether ransomware was involved.

By Arielle Waldman • April 13, 2023

Nokoyawa ransomware exploits Windows CLFS zero-day

The Nokoyawa ransomware attacks highlight the growing use of zero-day exploits by a variety of threat groups, including financially motivated cybercriminals.

By Arielle Waldman • April 12, 2023

FTX bankruptcy filing highlights security failures

Debtors claim that defunct cryptocurrency exchange FTX lacked any dedicated security personnel and failed to implement critical access controls for billions of dollars in assets.

By Alexander Culafi • April 11, 2023

How to fix the top 5 API vulnerabilities

APIs are more ubiquitous than ever, but many are still subject to well-known and often easily preventable vulnerabilities.

By Michael Cobb • April 11, 2023