Threats & Vulnerabilities: Page

Cryptocurrency mixer activity reaches new heights in 2022

Chainalysis observed a stark uptick in April that led to a steady decline in May and June, but illicit addresses and DeFi platforms have kept mixers busy so far this year.

By Arielle Waldman • July 15, 2022

Cryptocurrency crash triggers crisis for dark web exchanges

Cybersixgill says dark web exchanges that help cybercriminals launder their funds are facing a crisis as users are cashing out amid a cryptocurrency price crash.

By Shaun Nichols • July 14, 2022

Supreme Court justices doxxed on dark web

Five conservative Supreme Court justices were reportedly doxxed by threat actors that claim to have obtained credit card numbers, addresses and other information.

By Shaun Nichols • July 13, 2022

Public sector still facing ransomware attacks amid decline

While ransomware activity has reportedly decreased worldwide in recent months, several public sector organizations in the U.S. suffered attacks in June.

By Peyton Doyle • July 7, 2022

HackerOne incident raises concerns for insider threats

While the threat actor's motivation appears to be financial, it shows just how damaging an insider threat could be for vulnerability disclosure and bug bounty systems.

By Arielle Waldman • July 6, 2022

Ransomware in 2022: Evolving threats, slow progress

Experts say trends involving new forms of leverage, increasing numbers of affiliates and the evolving cyber insurance market are shaping the ransomware landscape in 2022.

By Alexander Culafi • July 5, 2022

Ransomware gangs using Log4Shell to attack VMware instances

Ransomware groups are exploiting the Log4Shell flaw in VMware Horizon and using DLL sideloading techniques to exfiltrate and encrypt data, according to Trend Micro.

By Shaun Nichols • June 28, 2022

Cisco Talos techniques uncover ransomware sites on dark web

One of the three techniques Cisco Talos used to de-anonymize ransomware dark web sites is to match TLS certificate serial numbers from dark web leak sites to the clear web.

By Alexander Culafi • June 28, 2022

Wiz launches open database to track cloud vulnerabilities

Wiz researchers Alon Schindel and Amitai Cohen and Scott Piper, cloud security engineer at Block, launched a database to list all known cloud vulnerabilities and security issues.

By Arielle Waldman • June 28, 2022

Chinese HUI Loader malware ups the ante on espionage attacks

A state-sponsored piece of malware may become a favorite weapon for Beijing-backed hacking crews looking to lift intellectual property from foreign firms.

By Shaun Nichols • June 24, 2022

Kaspersky unveils unknown APT actor ‘ToddyCat’

The origin of 'ToddyCat' is unknown. However, Kaspersky said the APT actor carries similarities with a number of Chinese-speaking threat groups.

By Alexander Culafi • June 22, 2022

Publicly disclosed U.S. ransomware attacks database

Each day SearchSecurity looks for every publicly available instance of a ransomware attack in the U.S. and compiles this data into a list to keep readers updated on recent threats.

By Peyton Doyle • June 22, 2022

Proofpoint: Social engineering attacks slipping past users

Executives, administrators and network defenders overlook the severity of many of the most effective social engineering tools, Proofpoint cautions.

By Shaun Nichols • June 22, 2022

Forescout discloses ‘OT:Icefall,’ 56 flaws from 10 vendors

The OT:Icefall vulnerabilities come from 10 operational technology vendors that make hardware for critical infrastructure, including Emerson, Honeywell, Motorola and more.

By Alexander Culafi • June 21, 2022

Cleveland BSides takes heat for Chris Hadnagy appearance

The Cleveland BSides security conference is experiencing turmoil after booking a 'surprise' keynote speaker who was recently barred from DEF CON for misconduct.

By Shaun Nichols • June 20, 2022

How hackers use AI and machine learning to target enterprises

AI benefits security teams and cybercriminals alike. Learn how hackers use AI and machine learning to target enterprises, and get tips on preventing AI-focused cyber attacks.

By Dave Shackleford • June 16, 2022

Alphv ransomware gang ups pressure with new extortion scheme

The ransomware operators this week launched a website for victims' employees and customers to search for any stolen personal information following an attack.

By Arielle Waldman • June 15, 2022

Microsoft takes months to fix critical Azure Synapse bug

Orca Security discovered that inadequate tenant separation in Microsoft's Azure Synapse service could allow a threat actor to steal credentials from thousands of customers.

By Alexander Culafi • June 15, 2022

directory traversal

Directory traversal is a type of HTTP exploit in which a hacker uses the software on a web server to access data in a directory other than the server's root directory.

By Ben Lutkevich • June 15, 2022

Critical Atlassian Confluence flaw remains under attack

Researchers say a critical flaw in the Atlassian Confluence Data Center and Server is now being used to spread ransomware in the wild, making updates a top priority.

By Shaun Nichols • June 14, 2022

How Russian sanctions may be helping US cybersecurity

Federal government officials say Russian sanctions decreased cyber attacks on the U.S. over the past few months but could potentially lead to significant threats down the road.

By Peyton Doyle • June 14, 2022

Tenable slams Microsoft over Azure vulnerabilities

Tenable expressed its frustration after working with Microsoft on the disclosure of two cloud flaws that researchers ranked as critical, which the company later silently patched.

By Arielle Waldman • June 13, 2022

Rob Joyce: China represents biggest long-term cyberthreat

NSA director of cybersecurity Rob Joyce spoke at RSA Conference 2022 about the cyberthreat landscape for nation-state attacks from Russia and China.

By Peyton Doyle • June 9, 2022

Mandiant: Cyberextortion schemes increasing pressure to pay

At RSA Conference 2022, Mandiant executives discussed how attackers are pulling out all the stops to pressure victims to pay, from DDoS attacks to harassing victims' customers.

By Arielle Waldman • June 9, 2022

Cisco Talos: Destructive malware, supply chain attacks rising

At RSA Conference 2022, Cisco Talos discussed how adversaries have evolved and changed their tactics, leading to major shifts in the threat landscape.

By Arielle Waldman • June 7, 2022