Threats & Vulnerabilities: Page

Dridex malware

Dridex is a form of malware that targets victims' banking information, with the main goal of stealing online account credentials to gain access to their financial assets.

By Alexander Gillis • Jan. 31, 2023

Horizon3.ai releases POC exploit for VMware vulnerabilities

Penetration testing vendor Horizon3.ai published technical details and exploit code for three new CVEs in VMware vRealize Log Insight that can be chained for remote code execution.

By Alexander Culafi • Jan. 31, 2023

FBI hacked into Hive ransomware gang, disrupted operations

The FBI infiltrated Hive's network in July 2022 and obtained decryption keys, which it distributed to victims to prevent $130 million in ransom payments, according to the DOJ.

By Alexander Culafi • Jan. 26, 2023

Contractor error led to Baltimore schools ransomware attack

A security contractor for Baltimore County Public Schools mistakenly opened a suspicious phishing email attachment in an unsecure environment, leading to the ransomware attack.

By Alexander Culafi • Jan. 25, 2023

Capex (capital expenditure)

A capital expenditure (Capex) is money invested by a company to acquire or upgrade fixed, physical, non-consumable assets, such as buildings and equipment or a new business.

By Nick Barney • Jan. 24, 2023

backdoor (computing)

A backdoor attack is a means to access a computer system or encrypted data that bypasses the system's customary security mechanisms.

By Ben Lutkevich , Brien Posey • Jan. 24, 2023

ITAR and EAR compliance

The International Traffic in Arms Regulations (ITAR) and the Export Administration Regulations (EAR) are two important U.S. export control laws that affect the manufacturing, sales and distribution of certain technologies, technology products, software and services.

By Rahul Awati • Jan. 20, 2023

Chainalysis: Ransomware payments down, fewer victims paying

Ransomware payments dropped significantly this past year, falling more than 40% from 2021, according to new research from blockchain analysis firm Chainalysis.

By Alexander Culafi • Jan. 19, 2023

Heartbleed

Heartbleed was a vulnerability in some implementations of OpenSSL, an open source cryptographic library.

By Sharon Shea • Jan. 19, 2023

Bitzlato cryptocurrency exchange founder arrested, charged

Russian national Anatoly Legkodymov is accused of using Bitzlato to process more than $700 million in illicit cryptocurrency transactions, including ransomware payments.

By Arielle Waldman • Jan. 18, 2023

LastPass faces mounting criticism over recent breach

LastPass disclosed a breach last month in which a threat actor stole personal customer information, including billing addresses and encrypted website login details.

By Alexander Culafi • Jan. 18, 2023

Windows zero day patched but exploitation activity unclear

Avast threat researchers detected exploitation of a Windows zero-day flaw in the wild, and organizations are being urged to patch the flaw immediately.

By Arielle Waldman • Jan. 12, 2023

How to prevent and detect lateral movement attacks

Reduce the success of lateral movement attacks by performing these eight key cybersecurity activities at strategic, operational and proactive levels.

By Charles Kolodgy • Jan. 10, 2023

Rackspace: Ransomware actor accessed 27 customers’ data

Rackspace said Personal Storage Tables of 27 customers were accessed in the attack last month, but added there was no evidence threat actors viewed, obtained or misused the data.

By Alexander Culafi • Jan. 6, 2023

Rackspace: Ransomware attack caused by zero-day exploit

The exploit that led to the Rackspace ransomware attack, referred to as OWASSRF, combines two Exchange Server flaws -- CVE-2022-41080 and a ProxyNotShell flaw, CVE-2022-41082.

By Alexander Culafi • Jan. 4, 2023

December ransomware disclosures reveal high-profile victims

Cloud provider Rackspace was just one of several major enterprises to suffer a ransomware attack, according to public disclosures and reports in December.

By Arielle Waldman • Jan. 4, 2023

Many Exchange servers still vulnerable to ProxyNotShell flaw

A new exploit chain using one of the ProxyNotShell vulnerabilities has bypassed Microsoft's URL Rewrite mitigations from September and put Exchange servers at risk.

By Alexander Culafi • Jan. 3, 2023

Play ransomware actors bypass ProxyNotShell mitigations

CrowdStrike is urging organizations to apply the latest Microsoft Exchange updates after investigations revealed attackers developed a bypass for ProxyNotShell mitigations.

By Arielle Waldman • Dec. 21, 2022

surveillance capitalism

Surveillance capitalism is an economic theory proposed by Harvard Business School Professor Emerita Shoshana Zuboff in 2014 that describes the modern, mass monetization of individuals' raw personal data in order to predict and modify their behavior.

By Nick Barney, Ivy Wigmore • Dec. 21, 2022

Malicious Python package in PyPI poses as SentinelOne SDK

No attacks resulting from the malicious Python package have been recorded to date. However, according to PyPI, more than 1,000 users had downloaded it before it was taken down.

By Alexander Culafi • Dec. 20, 2022

NCC Group: Ransomware attacks increased 41% in November

In addition to a month full of unexpected trends in both threat group activity and targeted sectors, NCC Group warned organizations to be aware of an increase in DDoS attacks.

By Arielle Waldman • Dec. 20, 2022

GPS jamming

GPS jamming is the act of using a frequency transmitting device to block or interfere with radio communications.

By Sarah Lewis • Dec. 16, 2022

Check Point classifies Azov as wiper, not ransomware

While Azov was initially considered ransomware, Check Point researchers warned the polymorphic malware is designed to inflict maximum damage to targeted systems.

By Arielle Waldman • Dec. 15, 2022

Cybereason warns of rapid increase in Royal ransomware

Enterprises need to be aware of the group's partial encryption technique because the less data it encrypts, the less chance the activity will be detected by a security product.

By Arielle Waldman • Dec. 14, 2022

Microsoft addresses two zero days in December Patch Tuesday

December's Patch Tuesday features fixes for 48 new bugs, including several critical vulnerabilities and two zero days, one of which is currently being exploited in the wild.

By Alexander Culafi • Dec. 13, 2022