Threats & Vulnerabilities: Page
-
Brand Experience Team/TechTarget
US offers $10M bounty for Conti ransomware information
The bounty follows a recent Conti ransomware attack that Costa Rica suffered in April. The country's new president, Rodrigo Chaves, declared a national emergency Sunday.
By Alexander Culafi • May 9, 2022 -
Brand Experience Team/TechTarget
parameter tampering
Parameter tampering is a type of web-based cyber attack in which certain parameters in a URL are changed without a user's authorization.
By Rahul Awati • May 9, 2022 -
Brand Experience Team/TechTarget
Cryptocurrency mixer sanctioned over Lazarus Group ties
North Korea's Lazarus Group is accused of stealing more than $600 million in the Axie Infinity hack and laundering a chunk through the Blender.io mixing service.
By Shaun Nichols • May 6, 2022 -
Brand Experience Team/TechTarget
Hackers exploit vulnerable Adminer for AWS database thefts
Mandiant researchers spotted a threat group using an exploit for older versions of Adminer to get their hands on metadata that included secret keys for AWS accounts.
By Shaun Nichols • May 5, 2022 -
Brand Experience Team/TechTarget
SentinelOne finds high-severity flaws in Avast, AVG
The Avast and AVG vulnerabilities, which have been patched, went undiscovered for 10 years and potentially impact millions of devices, according to SentinelOne.
By Alexander Culafi • May 5, 2022 -
Brand Experience Team/TechTarget
Coveware: Double-extortion ransomware attacks fell in Q1
Coveware said double-extortion ransomware may be replaced with 'big shame ransomware,' in which an attacker threatens to leak sensitive data without encrypting it.
By Alexander Culafi • May 4, 2022 -
Brand Experience Team/TechTarget
Winnti threat group rides again with IP theft campaign
A Chinese cyberespionage campaign, dubbed 'Operation CuckooBees' by Cybereason, went unnoticed for years as spies siphoned off intellectual property from companies.
By Shaun Nichols • May 4, 2022 -
Brand Experience Team/TechTarget
Trend Micro discovers AvosLocker can disable antivirus software
AvosLocker operators are using legitimate tools and previously disclosed vulnerabilities to disable antivirus software and evade detection on infected machines.
By Arielle Waldman • May 3, 2022 -
Brand Experience Team/TechTarget
RCE vulnerabilities found in Avaya, Aruba network switches
Armis told SearchSecurity that depending on device model, it was 'not too hard to develop an exploit' for the Avaya and Aruba flaws, heightening concern for administrators.
By Alexander Culafi • May 3, 2022 -
Brand Experience Team/TechTarget
April ransomware attacks slam US universities
April's ransomware attacks were highlighted by several universities and colleges in the U.S. reporting attacks, plus a possible data breach at one of the world's largest beverage companies.
By Peyton Doyle • May 3, 2022 -
Brand Experience Team/TechTarget
Cyberespionage group exploiting network and IoT blind spots
Researchers with Mandiant have uncovered a new espionage-focused hacking operation that takes advantage of IoT and networking gear that security tools don't cover.
By Shaun Nichols • May 2, 2022 -
Brand Experience Team/TechTarget
Lapsus$ targeting SharePoint, VPNs and virtual machines
From social engineering attacks to admin tools, a recent NCC Group report examined the tactics used by Lapsus$ to breach companies like Microsoft, Nvidia and Samsung.
By Peyton Doyle • April 28, 2022 -
Brand Experience Team/TechTarget
Check Point: Ransomware attacks lasted 9.9 days in 2021
Check Point Research and Kovrr found ransomware attack victims paid out 89% of the ransom demand on average in 2019. The figure dropped to 27% in 2020 before rising to 49% in 2021.
By Alexander Culafi • April 28, 2022 -
Brand Experience Team/TechTarget
Case study: Why it’s difficult to attribute nation-state attacks
If two attacks look similar, don't assume they're from the same attacker. It's difficult to attribute nation-state attacks, as evidenced by the notorious 2016 Odinaff malware.
By No Starch Press, Isabella Harford • April 28, 2022 -
Brand Experience Team/TechTarget
Phishing attacks benefiting from shady SEO practices
Cybercriminals running phishing operations are now making use of SEO specialists that break Google's rules to get themselves placed above legitimate search results to lure victims.
By Shaun Nichols • April 28, 2022 -
Brand Experience Team/TechTarget
Five Eyes reveals 15 most exploited vulnerabilities of 2021
Law enforcement agencies from five countries share the top flaws they've observed being exploited this year, some of which were disclosed as early as 2018.
By Arielle Waldman • April 27, 2022 -
Brand Experience Team/TechTarget
REvil ransomware attacks resume, but operators are unknown
The notorious REvil ransomware gang appears to be up and running once more, as new attacks and malware samples have been observed, but it's unclear who is behind the operation.
By Shaun Nichols • April 27, 2022 -
Brand Experience Team/TechTarget
Sophos: 66% of organizations hit by ransomware in 2021
Forty-four percent of organizations surveyed by Sophos said they used multiple approaches to recover data following a ransomware attack, including paying ransoms and using backups.
By Alexander Culafi • April 27, 2022 -
Brand Experience Team/TechTarget
Cisco Talos observes ‘novel increase’ in APT activity in Q1
The security vendor uncovered new trends during Q1, including increased APT attacks, 'democratized' ransomware threats and significant exploitation of Log4j bugs.
By Arielle Waldman • April 26, 2022 -
Brand Experience Team/TechTarget
Colonial Pipeline hack explained: Everything you need to know
A ransomware attack brought a major gas pipeline to a standstill in May. Here's what happened and who was behind the hack.
By Sean Kerner • April 26, 2022 -
Brand Experience Team/TechTarget
LemonDuck botnet evades detection in cryptomining attacks
While the botnet is not new, it appears operators are honing their skills and evading Alibaba Cloud's monitoring service to take advantage of rising cryptocurrency prices.
By Arielle Waldman • April 25, 2022 -
Brand Experience Team/TechTarget
T-Mobile breached in apparent Lapsus$ attack
Lapsus$'s alleged theft of T-Mobile source code is in line with its previous activity; the cybercrime group previously stole code from Microsoft and Samsung.
By Alexander Culafi • April 25, 2022 -
Brand Experience Team/TechTarget
Zero-day vulnerability exploitation soaring, experts say
Researchers with Mandiant and Google Project Zero say they observed significant increases in exploitation of zero-day vulnerabilities over the past year.
By Shaun Nichols • April 21, 2022 -
Brand Experience Team/TechTarget
Cryptocurrency theft leaves Beanstalk Farms’ future in doubt
Beanstalk Farms' founders confirmed they found many aspects of activity during the attack 'strange' but saw no reason for concern. Now, the company's future is uncertain.
By Arielle Waldman • April 21, 2022 -
Brand Experience Team/TechTarget
FBI warns of ‘timed’ ransomware attacks on agriculture sector
In a recent alert, the FBI warned that food and agriculture businesses could become a target of ransomware attacks at the sector's busiest times of the year.
By Peyton Doyle • April 21, 2022
Previous
