Threats & Vulnerabilities: Page
-
Brand Experience Team/TechTarget
North Korean hackers exploited Chrome zero-day for 6 weeks
Google researchers say a Chrome zero-day bug stemming from a use-after-free error was exploited by North Korean hackers against both media and financial targets earlier this year.
By Shaun Nichols • March 24, 2022 -
Brand Experience Team/TechTarget
FBI: Ransomware hit 649 critical infrastructure entities in 2021
The FBI's Internet Crime Complaint Center found ransomware was a top threat to critical infrastructure security in 2021, hitting a wide range of organizations.
By Arielle Waldman • March 24, 2022 -
Brand Experience Team/TechTarget
Okta provides new details on Lapsus$ attack
The authentication provider shed new light on how a customer service agent at subcontractor Sitel was hacked and then used to obtain data on hundreds of Okta clients.
By Shaun Nichols • March 24, 2022 -
Brand Experience Team/TechTarget
Lapsus$ hacking group hit authentication vendor Okta
Authentication vendor Okta is the latest tech giant to be named as a victim of the prolific Lapsus$ crew, through key details about the attack remain in dispute.
By Shaun Nichols • March 22, 2022 -
Brand Experience Team/TechTarget
Biden: Russia exploring cyber attacks against US
President Joe Biden's warning of potential Russian attacks against U.S. critical infrastructure is the latest call to action for the private sector to fortify its cyberdefenses.
By Alexander Culafi • March 22, 2022 -
Brand Experience Team/TechTarget
JavaScript apps hit with pro-Ukraine supply chain attack
A popular JavaScript package was sabotaged by its developer and seeded with messages in support of Ukraine in what has become a supply chain attack.
By Shaun Nichols • March 17, 2022 -
Brand Experience Team/TechTarget
LokiLocker ransomware crew bursts onto the scene
The mysterious LokiLocker ransomware group caught the attention of BlackBerry researchers, who say the outfit could become the next cybercrime group to menace enterprises.
By Shaun Nichols • March 16, 2022 -
Brand Experience Team/TechTarget
FTC accuses CafePress of covering up 2019 data breach
The proposed FTC settlement would require CafePress' former owner to pay $500,000 in compensation to customers who were victimized in the company's 2019 data breach.
By Alexander Culafi • March 16, 2022 -
Brand Experience Team/TechTarget
Cyber insurance war exclusions loom amid Ukraine crisis
Changes in insurance exemptions for acts of war reflect an increase in damages caused to enterprises related to state-sponsored cyber attacks.
By Arielle Waldman • March 14, 2022 -
Brand Experience Team/TechTarget
Log4Shell vulnerability continues to menace developers
Months after it was first disclosed, the Log4j RCE vulnerability remains widespread on code-sharing sites and open source repositories, according to security researchers.
By Shaun Nichols • March 10, 2022 -
Brand Experience Team/TechTarget
6 potential enterprise security risks with NFC technology
Some NFC risks include payment processing fraud, eavesdropping and replay attacks.
By Sean Kerner • March 10, 2022 -
Brand Experience Team/TechTarget
metamorphic and polymorphic malware
Metamorphic and polymorphic malware are two types of malicious software (malware) that can change their code as they propagate through a system.
By Rahul Awati • March 10, 2022 -
Brand Experience Team/TechTarget
Researchers disclose new Spectre V2 vulnerabilities
The Spectre class of data disclosure vulnerabilities is once again at the security forefront after researchers discovered a new variant of the side-channel attack.
By Shaun Nichols • March 9, 2022 -
Brand Experience Team/TechTarget
FBI finds Ragnar Locker hit 52 U.S. critical infrastructure targets
While providing an updated list of indicators of compromise, the FBI revealed that a range of critical sectors were attacked by the ransomware group.
By Arielle Waldman • March 8, 2022 -
Brand Experience Team/TechTarget
Researchers uncover vulnerabilities in APC Smart-UPS devices
Researchers with Armis found a trio of vulnerabilities in uninterruptible power supply (UPS) devices from APC that could be remotely exploited by threat actors.
By Shaun Nichols • March 8, 2022 -
Brand Experience Team/TechTarget
Samsung breached, Nvidia hackers claim responsibility
Samsung said Galaxy device source code was stolen, but no employee or customer personal information was taken by the attackers, who appear to be with the Lapsus$ ransomware group.
By Alexander Culafi • March 7, 2022 -
Brand Experience Team/TechTarget
Hackers using stolen Nvidia certificates to sign malware
The recent breach of Nvidia's corporate network has resulted in the posting of valid software certificates that are now being used to spread malware in the wild.
By Shaun Nichols • March 4, 2022 -
Brand Experience Team/TechTarget
February ransomware attacks hit major enterprises
Enterprises, colleges and municipalities in the U.S. continued to be hit by ransomware as publicly reported attacks for February piled up.
By Peyton Doyle • March 4, 2022 -
Brand Experience Team/TechTarget
CrowdStrike cracks PartyTicket ransomware targeting Ukraine
CrowdStrike's analysis of the new ransomware, also known as HermeticRansom, that affected Ukrainian organizations revealed that files encrypted with PartyTicket are recoverable.
By Arielle Waldman • March 2, 2022 -
Brand Experience Team/TechTarget
Conti ransomware source code, documentation leaked
The Conti ransomware gang's primary Bitcoin address, found in the leak, showed the crime outfit has taken in over $2 billion in cryptocurrency since 2017.
By Alexander Culafi • March 1, 2022 -
Brand Experience Team/TechTarget
Recorded Future: Russia may retaliate with cyber attacks
Recorded Future warned U.S. and European organizations could be hit by 'spillover attacks' or intentional retaliatory strikes from Russia following its invasion of Ukraine.
By Arielle Waldman • Feb. 28, 2022 -
Brand Experience Team/TechTarget
Conti ransomware gang backs Russia, threatens U.S.
The Conti ransomware gang announced last week that they were in 'full support' of Russia and would retaliate if the West attacked Russian critical infrastructure.
By Alexander Culafi • Feb. 28, 2022 -
Brand Experience Team/TechTarget
Researchers find access brokers focused on US targets
Security vendors studied 'access broker' advertisements on the dark web, which provide ransomware groups with the network and system access required for data thefts.
By Shaun Nichols • Feb. 25, 2022 -
Brand Experience Team/TechTarget
New data wiper malware hits Ukraine targets
HermeticWiper is similar to another data-wiping malware known as WhisperGate, which was used in cyber attacks against Ukraine last month. Both used ransomware as an apparent decoy.
By Alexander Culafi • Feb. 24, 2022 -
Brand Experience Team/TechTarget
New tech, same threats for Web 3.0
Emerging technologies are prone to old-school social engineering attacks and credential-swiping techniques, according to Cisco Talos researchers who analyzed the new platforms.
By Shaun Nichols • Feb. 24, 2022
Previous
