Threats & Vulnerabilities: Page

Police raids target ‘core’ DoppelPaymer ransomware members

A coordinated law enforcement effort last week resulted in raids and arrest warrants against 'core members' of the infamous DoppelPaymer ransomware group.

By Arielle Waldman • March 6, 2023

Ransomware attacks ravaged big names in February

While ransomware incidents appear to be decreasing, several high-profile organizations, including Dole, Dish Network and the U.S. Marshals Service, suffered notable attacks.

By Arielle Waldman • March 2, 2023

Rapid7: Attackers exploiting vulnerabilities ‘faster than ever’

Rapid7's 2022 Vulnerability Intelligence Report analyzed how attackers' increasing speed in deploying exploits affected an onset of widespread threats in 2022.

By Arielle Waldman • Feb. 28, 2023

LastPass breach tied to hack of engineer’s home computer

LastPass said a threat actor hacked an employee's home computer to access a corporate password vault and steal decryption keys for its product backups and cloud storage resources.

By Alexander Culafi • Feb. 28, 2023

U.S. Marshals Service suffers ransomware attack, data breach

Ransomware actors breached the U.S. Marshals Service earlier this month and stole sensitive information pertaining to agency investigations, though many questions remain.

By Arielle Waldman • Feb. 28, 2023

CrowdStrike: Threat actors shifting away from ransomware

CrowdStrike's '2023 Global Threat Report' showed a 20% increase in the number of threat actors using data theft and extortion tactics without deploying actual ransomware.

By Alexander Culafi • Feb. 28, 2023

How hackers can abuse ChatGPT to create malware

ChatGPT's capabilities for producing software code are limited. But researchers have observed cybercriminals bypassing the chatbot's safeguards to produce malicious content.

By Alexis Zacharakos • Feb. 22, 2023

Google: Russia continues to set cyber sights on NATO nations

A new report from Google's Threat Analysis Group shed light on Russia's efforts to conduct malicious cyber campaigns not only against Ukraine but also NATO nations too.

By Alexander Culafi • Feb. 16, 2023

Ransomware actors increasingly weaponizing old vulnerabilities

A new report from Cyber Security Works shows that 76% of all ransomware-associated vulnerabilities tracked in 2022 were old flaws initially discovered between 2010 and 2019.

By Alexander Culafi • Feb. 16, 2023

No relief in sight for ransomware attacks on hospitals

Despite being off limits for some hackers, hospitals continue to be lucrative targets for ransomware groups because of their valuable data and higher rate of paying ransoms.

By Alexis Zacharakos • Feb. 16, 2023

Web 3.0 security risks: What you need to know

Elements of the third version of the web are coming to fruition. But Web 3.0 also comes with new cybersecurity, financial and privacy threats besides the familiar risks of Web 2.0.

By Jessica Groopman • Feb. 16, 2023

Cisco Talos spots new MortalKombat ransomware attacks

Researchers discovered the threat campaign is also using a new GO version of malware called Laplas Clipper to steal cryptocurrency from individuals and businesses in the U.S.

By Arielle Waldman • Feb. 15, 2023

Dragos: ICS/OT ransomware attacks up 87%

Ransomware attacks against industrial organizations remains a growing problem, according to ICS/OT vendor Dragos' new 'Year in Review 2022' report.

By Alexander Culafi • Feb. 14, 2023

Namecheap email system hacked, used for phishing campaign

While the domain registrar said it was not breached directly, it did confirm its third-party email system was compromised Sunday and warned customers not to open any unauthorized emails.

By Arielle Waldman • Feb. 13, 2023

New ESXi ransomware strain spreads, foils decryption tools

Since the onset of the widespread attacks last week, the ESXiArgs ransomware strain appears to have undergone updates that make it harder for enterprises to recover data.

By Arielle Waldman • Feb. 10, 2023

U.S., U.K. hit TrickBot cybercrime gang with sanctions

TrickBot malware has caused considerable damage to U.S. organizations, particularly in the healthcare industry, and was used in Conti and Ryuk ransomware attacks.

By Arielle Waldman • Feb. 9, 2023

Hypervisor patching struggles exacerbate ESXiArgs attacks

Ransomware hit a high number of unpatched VMware ESXi servers by exploiting two- and three-year-old flaws, which has put hypervisor patching difficulties in the spotlight.

By Arielle Waldman • Feb. 9, 2023

Thousands of victims apparently hit by ESXiArgs ransomware

A joint security advisory from CISA and the FBI said the ESXiArgs ransomware campaign has claimed over 3,800 servers globally since attacks first emerged last week.

By Alexander Culafi • Feb. 9, 2023

reverse brute-force attack

A reverse brute-force attack is a type of brute-force attack in which an attacker uses a common password against multiple usernames in an attempt to gain access to a network.

By Alexander Gillis • Feb. 8, 2023

Vastaamo hacking suspect arrested in France

The suspect in the infamous cyber attack, Julius Kivimäki, is a 25-year-old Finnish man who was arrested after being remanded in absentia in October 2022.

By Alexander Culafi • Feb. 6, 2023

Widespread ransomware campaign targets VMware ESXi servers

The attacks exploited a two-year-old heap overflow vulnerability in VMware ESXi. Many questions remain about the scope of the campaign and the threat actor behind it.

By Arielle Waldman • Feb. 6, 2023

passive reconnaissance

Passive reconnaissance is an attempt to gain information about targeted computers and networks without actively engaging with the systems.

By Robert Sheldon • Feb. 3, 2023

HeadCrab malware targets Redis to mine cryptocurrency

Aqua Security said the HeadCrab botnet has taken control of at least 1,200 servers via internet-facing instances of the opensource DBMS Redis and is using them for cryptomining.

By Alexander Culafi • Feb. 2, 2023

Ransomware attacks on public sector persist in January

Many of the attacks disclosed or reported in January occurred against the public sector, including multiple school districts that were hit within days of one another.

By Arielle Waldman • Feb. 2, 2023

How to use BeEF, the Browser Exploitation Framework

The open source BeEF pen testing tool can be used by red and blue teams alike to hook web browsers and use them as beachheads to launch further attacks.

By Ed Moyle • Feb. 1, 2023