Threats & Vulnerabilities: Page

5 ChatGPT security risks in the enterprise

Whether in the hands of cybercriminals or oblivious end users, ChatGPT introduces new security risks.

By Alissa Irei , Ashwin Krishnan • April 7, 2023

119 arrested in Genesis Market takedown

The FBI and Dutch National Police led the takedown of Genesis Market alongside more than a dozen partners, including the U.K., Italy, Spain and Romania.

By Alexander Culafi • April 6, 2023

March ransomware disclosures spike behind Clop attacks

The Clop ransomware gang claimed responsibility for several disclosed ransomware attacks on major enterprises, which stemmed from a zero-day flaw in Fortra's GoAnywhere software.

By Arielle Waldman • April 4, 2023

Source of 3CX supply chain attack unclear as fallout continues

Multiple statements originally referenced a third-party library as the apparent source for 3CX's recent supply chain attack, but that may no longer be the case.

By Alexander Culafi • April 3, 2023

3CX desktop app compromised, abused in supply chain attack

3CX customers noticed that several threat detection platforms began flagging and blocking the UC vendor's desktop application last week due to malicious activity in the executable.

By Rob Wright • March 30, 2023

Azure Pipelines vulnerability spotlights supply chain threats

Legit Security researchers discovered a remote code execution flaw within Microsoft's Azure DevOps platform that could give threat actors complete control of development pipelines.

By Beth Pariseau , Rob Wright • March 30, 2023

Google: Spyware vendors exploiting iOS, Android zero days

Recent campaigns observed by Google's Threat Analysis Group showed spyware vendors' use of zero days and known vulnerabilities pose an increasing threat.

By Arielle Waldman • March 29, 2023

Top 9 cryptocurrency hacks of 2022

Top 9 cryptocurrency hacks of 2022

By Amanda Hetler • March 28, 2023

Publicly disclosed U.S. ransomware attacks in 2023

TechTarget Editorial's ransomware database collects public disclosures, notifications and confirmed reports of attacks against U.S. organizations each month.

By Rob Wright • March 28, 2023

SMS pumping attacks and how to mitigate them

Online forms that use SMS can be costly to organizations if they are vulnerable to SMS pumping attacks. Use the following methods to mitigate or prevent this fraud-based attack.

By Kyle Johnson • March 24, 2023

More victims emerge from Fortra GoAnywhere zero-day attacks

Threat actors began exploiting a zero-day vulnerability in Fortra's GoAnywhere file sharing software in late January, victimizing several large enterprises.

By Arielle Waldman • March 23, 2023

cyber espionage

Cyber espionage (cyberespionage) is a type of cyber attack that malicious hackers carry out against a business or government entity.

By Alexander Gillis • March 23, 2023

ZenGo finds transaction simulation flaw in Coinbase, others

Referred to as a 'red pill attack,' ZenGo researchers discovered a way to exploit smart contracts and bypass security features known as transaction simulation solutions.

By Alexander Culafi • March 21, 2023

Techno-nationalism explained: What you need to know

Techno-nationalism changes the way providers do business and the way users interact with tech.

By Ben Lutkevich • March 20, 2023

FBI arrests suspected BreachForums owner in New York

The BreachForums arrest occurred days after DC Health Link's data went up for sale on the dark web message board, though the affidavit did not cite the breach in the arrest.

By Alexander Culafi • March 20, 2023

Google warns users of Samsung Exynos zero-day vulnerabilities

To prevent threat actors from exploiting the unpatched attack vectors, Google Project Zero made an exception for four Exynos chipset flaws by extending its disclosure timeline.

By Arielle Waldman • March 17, 2023

U.S. federal agency hacked via 3-year-old Telerik UI flaw

A CISA advisory said multiple threat actors recently exploited a Progress Telerik UI vulnerability, first disclosed in 2019, to breach an unnamed federal civilian agency.

By Alexander Culafi • March 16, 2023

Secureworks IR team saw BEC attacks double in 2022

Vendor and incident response firm Secureworks referred to business email compromise, or BEC attacks, as 'the largest monetary threat to organizations.'

By Alexander Culafi • March 15, 2023

quantum supremacy

Quantum supremacy is the experimental demonstration of a quantum computer's dominance and advantage over classical computers by performing calculations previously impossible at unmatched speeds.

By Kate Brush • March 15, 2023

Magniber ransomware actors exploiting Microsoft zero day

Magniber ransomware actors discovered a way to bypass Microsoft's remediation for a previous SmartScreen vulnerability to attack enterprises, according to Google researchers.

By Arielle Waldman • March 14, 2023

IceFire ransomware targets Linux, exploits IBM vulnerability

IceFire ransomware actors have shifted their attention to Linux servers and are actively exploiting a known vulnerability in IBM's Aspera Faspex file sharing software.

By Arielle Waldman • March 9, 2023

cyberwarfare

The generally accepted definition of cyberwarfare is a series of cyber attacks against a nation-state, causing it significant harm.

By Kevin Ferguson, Alexander Gillis, Katie Terrell Hanna • March 9, 2023

Flashpoint: Threat vectors converging, increasing damage

The threat intelligence vendor warned that threat actors are increasingly combining known vulnerabilities, stolen credentials and exposed data to wreak maximum damage.

By Arielle Waldman • March 9, 2023

VulnCheck: CISA’s KEV missing 42 vulnerabilities from 2022

VulnCheck said CISA's Known Exploited Vulnerabilities catalog 'cannot be treated as the authoritative catalog of exploited vulnerabilities' in its current state.

By Alexander Culafi • March 9, 2023

Vishing attacks increasing, but AI’s role still unclear

The volume of vishing attacks continues to rise. But threat researchers say it's difficult to attribute such threats to artificial intelligence tools and deepfake technology.

By Alexis Zacharakos • March 7, 2023