Threats & Vulnerabilities: Page
-
Brand Experience Team/TechTarget
MacOS malware attacks slipping through the cracks
Apple security specialist Patrick Wardle told RSA Conference 2022 attendees that some of the worst security flaws in the macOS operating system come from overlooked bits of code.
By Shaun Nichols • June 6, 2022 -
Brand Experience Team/TechTarget
Major DDoS attacks increasing after invasion of Ukraine
DDoS attacks are a growing threat to both government and commercial entities across the globe, as Russia's invasion of Ukraine has increased the rate of attacks in 2022.
By Peyton Doyle • June 6, 2022 -
Brand Experience Team/TechTarget
Critical Atlassian Confluence flaw exploited in the wild
No patch is currently available for the critical Atlassian bug, which affects Confluence Server and Data Center products, though one is expected by end of day Friday.
By Alexander Culafi • June 3, 2022 -
Brand Experience Team/TechTarget
May ransomware attacks strike municipal governments, IT firms
A major agriculture machinery vendor as well as a handful of other private companies and municipal governments were the targets of ransomware attacks in May.
By Peyton Doyle • June 2, 2022 -
Brand Experience Team/TechTarget
Conti ransomware group targeted Intel firmware tools
A pair of Intel firmware management platforms were targeted by the notorious Conti ransomware group to create new attack techniques, according to Eclypsium researchers.
By Shaun Nichols • June 2, 2022 -
Brand Experience Team/TechTarget
Hackers ransom 1,200 exposed Elasticsearch databases
An extensive extortion operation didn't need exploits or vulnerabilities to take over more than 1,200 Elasticsearch databases and demand bitcoin payments, according to Secureworks.
By Shaun Nichols • June 1, 2022 -
Brand Experience Team/TechTarget
Forescout proof-of-concept ransomware attack affects IoT, OT
Forescout's proof of concept showed how an attacker could use an IoT camera to gain access to an enterprise's IT network and then shut down operational technology hardware.
By Alexander Culafi • June 1, 2022 -
Brand Experience Team/TechTarget
Microsoft zero day exploited in the wild, workarounds released
A zero-day flaw in the Microsoft Support Diagnostic Tool has already been exploited in the wild. No patch is available yet, but Microsoft released temporary mitigations.
By Rob Wright • May 31, 2022 -
Brand Experience Team/TechTarget
U.S. Senate report calls out lack of ransomware reporting
The Senate Committee on Homeland Security published a report that points to a lack of ransomware reporting as a major issue in defending the U.S. from cyber attacks.
By Peyton Doyle • May 26, 2022 -
Brand Experience Team/TechTarget
‘Pantsdown’ BMC vulnerability still present in Quanta servers
Eclypsium found that a critical security flaw first disclosed in 2019 remains exposed in many internet-facing servers, leaving networks at risk for remote code execution attacks.
By Shaun Nichols • May 26, 2022 -
Brand Experience Team/TechTarget
Developers targeted by poisoned Python library
A developer's expired domain led to a threat actor taking control of an open source library and poisoning it with malware that could steal private keys for AWS instances.
By Shaun Nichols • May 24, 2022 -
Brand Experience Team/TechTarget
Verizon DBIR: Ransomware dominated threat landscape in 2021
Though ransomware became an increasingly large threat to enterprises last year, Verizon's Data Breach Investigations Report found the model may not be as profitable as expected.
By Arielle Waldman • May 24, 2022 -
Brand Experience Team/TechTarget
AdvIntel: Conti rebranding as several new ransomware groups
According to AdvIntel's research, the Conti ransomware group's attack on the Costa Rican government was part of a rebranding effort, as the gang's ransom payments had dried up.
By Alexander Culafi • May 23, 2022 -
Brand Experience Team/TechTarget
QNAP devices hit by DeadBolt ransomware again
DeadBolt ransomware is once again targeting QNAP's NAS devices, and the vendor is urging customers to patch immediately.
By Arielle Waldman • May 19, 2022 -
Brand Experience Team/TechTarget
VMware vulnerabilities under attack, CISA urges action
Administrators are grappling with four VMware vulnerabilities -- two older flaws that are under active exploitation and two new bugs that CISA believes will be exploited soon.
By Shaun Nichols • May 19, 2022 -
Brand Experience Team/TechTarget
Axie Infinity hack highlights DPRK cryptocurrency heists
The $620 million hack of developer Sky Mavis earlier this year is only the latest in a long line of cryptocurrency platform attacks conducted by North Korean nation-state actors.
By Alexander Culafi • May 18, 2022 -
Brand Experience Team/TechTarget
North Korean IT workers targeting US enterprises
North Korean nationals are looking to land jobs at U.S. and European companies to collect sensitive data that could help the reclusive government's military programs.
By Shaun Nichols • May 17, 2022 -
Brand Experience Team/TechTarget
Cardiologist charged with creating Thanos, Jigsaw ransomware
Moises Luis Zagala Gonzalez, 55, faces up to five years in prison for each of the two charges connected to his alleged role in creating Thanos and Jigsaw ransomware.
By Alexander Culafi • May 17, 2022 -
Brand Experience Team/TechTarget
man in the browser (MitB)
Man in the browser (MitB) is a security attack where the perpetrator installs a Trojan horse on the victim's computer that is capable of modifying that user's web transactions.
By Alexander Gillis • May 17, 2022 -
Brand Experience Team/TechTarget
Opinion
How cryptocurrencies enable attackers and defenders
Threat actors use cryptocurrencies for their anonymity, but they're not as impenetrable as once thought. Discover how cryptocurrencies can help attackers and defenders alike.
By Josh Davies • May 16, 2022 -
Brand Experience Team/TechTarget
Iranian APT Cobalt Mirage launching ransomware attacks
Secureworks researchers said a new Iranian state-sponsored threat group is melding government and financial interests by targeting U.S. organizations with ransomware attacks.
By Shaun Nichols • May 12, 2022 -
Brand Experience Team/TechTarget
Critical F5 vulnerability under exploitation in the wild
A remote code vulnerability in F5 BIG-IP network appliances is now being scanned for by threat actors, and some experts have observed exploitation in the wild.
By Shaun Nichols • May 11, 2022 -
Brand Experience Team/TechTarget
US, allies warn of nation-state attacks against MSPs
The joint advisory did not name any specific nation-states, though co-sponsor agencies expect threat actors to 'step up their targeting' of managed service providers (MSPs).
By Alexander Culafi • May 11, 2022 -
Brand Experience Team/TechTarget
New clues point to REvil ransomware gang’s return
New research from Secureworks' Counter Threat Unit provides further evidence that the REvil ransomware group, once thought to be defunct, is indeed back on the scene.
By Shaun Nichols • May 10, 2022 -
Brand Experience Team/TechTarget
US, EU attribute Viasat hack to Russia
The U.S. and U.K. governments, along with the EU, confirmed the suspicions around the attack that disrupted satellite services for customers in Ukraine as Russia invaded the country.
By Arielle Waldman • May 10, 2022
Previous
