Threats & Vulnerabilities: Page


  • The techtarget logo in teal next to the text reading techtarget set against a dark-blue background
    Image attribution tooltip
    Brand Experience Team/TechTarget
    Image attribution tooltip

    US, UK attribute Cyclops Blink to Sandworm

    The group known for its use of VPNFilter malware has retooled with what is being tracked as Cyclops Blink, but its impact appears limited to WatchGuard business customers for now.

    By Arielle Waldman • Feb. 23, 2022
  • The techtarget logo in teal next to the text reading techtarget set against a dark-blue background
    Image attribution tooltip
    Brand Experience Team/TechTarget
    Image attribution tooltip

    Dragos: Ransomware topped ICS and OT threats in 2021

    Whether ICS and OT networks were intentionally targeted or not, ransomware was found to be the No. 1 compromise to industrial organizations last year.

    By Arielle Waldman • Feb. 23, 2022
  • The techtarget logo in teal next to the text reading techtarget set against a dark-blue background
    Image attribution tooltip
    Brand Experience Team/TechTarget
    Image attribution tooltip

    IBM: REvil dominated ransomware activity in 2021

    IBM X-Force's Threat Intelligence Index report also found a 'triple extortion' ransomware tactic in 2021, where threat actors use DDoS attacks to put extra pressure on victims.

    By Alexander Culafi • Feb. 23, 2022
  • The techtarget logo in teal next to the text reading techtarget set against a dark-blue background
    Image attribution tooltip
    Brand Experience Team/TechTarget
    Image attribution tooltip

    FBI: BEC attacks spreading to virtual meetings

    Since the start of the COVID-19 pandemic, many workplaces have shifted to virtual meeting platforms, and the FBI warned that threat actors have taken note.

    By Peyton Doyle • Feb. 17, 2022
  • The techtarget logo in teal next to the text reading techtarget set against a dark-blue background
    Image attribution tooltip
    Brand Experience Team/TechTarget
    Image attribution tooltip

    SonicWall: Ransomware attacks increased 105% in 2021

    While 2021 represented a turning point for law enforcement and government action against ransomware, SonicWall still observed massive growth in attacks.

    By Shaun Nichols • Feb. 17, 2022
  • The techtarget logo in teal next to the text reading techtarget set against a dark-blue background
    Image attribution tooltip
    Brand Experience Team/TechTarget
    Image attribution tooltip

    Trickbot has infected 140,000-plus machines since late 2020

    In October 2020, Microsoft reported that more than 90% of Trickbot's infrastructure had been disabled. The threat actor bounced back and began thriving soon after.

    By Alexander Culafi • Feb. 16, 2022
  • The techtarget logo in teal next to the text reading techtarget set against a dark-blue background
    Image attribution tooltip
    Brand Experience Team/TechTarget
    Image attribution tooltip

    Sophos discovers new attack targeting Exchange Servers

    A new type of attack that utilizes the Squirrelwaffle malware and business email compromise may be an issue for organizations that have not patched their Exchange servers.

    By Arielle Waldman • Feb. 15, 2022
  • The techtarget logo in teal next to the text reading techtarget set against a dark-blue background
    Image attribution tooltip
    Brand Experience Team/TechTarget
    Image attribution tooltip

    proxy hacking

    Proxy hacking is a cyber attack technique designed to supplant an authentic webpage in a search engine's index and search results pages to drive traffic to an imitation site.

    By Gavin Wright • Feb. 15, 2022
  • The techtarget logo in teal next to the text reading techtarget set against a dark-blue background
    Image attribution tooltip
    Brand Experience Team/TechTarget
    Image attribution tooltip

    CrowdStrike: Attackers are moving faster, harder to detect

    The CrowdStrike '2022 Global Threat Report' said attackers are getting better at exploiting vulnerabilities and moving through compromised networks before defenders can spot them.

    By Shaun Nichols • Feb. 15, 2022
  • The techtarget logo in teal next to the text reading techtarget set against a dark-blue background
    Image attribution tooltip
    Brand Experience Team/TechTarget
    Image attribution tooltip

    Ransomware tied to attacks on critical infrastructure last year

    While recent law enforcement action may be altering the ransomware landscape, BlackBerry researchers observed high-profile attacks on critical infrastructure last year.

    By Arielle Waldman • Feb. 15, 2022
  • The techtarget logo in teal next to the text reading techtarget set against a dark-blue background
    Image attribution tooltip
    Brand Experience Team/TechTarget
    Image attribution tooltip

    CISA says ‘Shields Up’ as Russia-Ukraine tensions escalate

    CISA said in its advisory that 'there are not currently any specific credible threats to the U.S. homeland,' but cited past Russian cyber attacks against Ukraine and others.

    By Alexander Culafi • Feb. 14, 2022
  • The techtarget logo in teal next to the text reading techtarget set against a dark-blue background
    Image attribution tooltip
    Brand Experience Team/TechTarget
    Image attribution tooltip

    Fallout from REvil arrests shakes up ransomware landscape

    Russian authorities recently announced more than a dozen arrests of alleged REvil members, heightening concern among ransomware affiliates on the dark web.

    By Arielle Waldman • Feb. 14, 2022
  • The techtarget logo in teal next to the text reading techtarget set against a dark-blue background
    Image attribution tooltip
    Brand Experience Team/TechTarget
    Image attribution tooltip

    FBI seized Colonial Pipeline ransom from DarkSide affiliate

    New research from Chainalysis claims the DarkSide ransomware affiliate involved in last year's Colonial Pipeline attack also had ties to the NetWalker ransomware operation.

    By Alexander Culafi • Feb. 11, 2022
  • The techtarget logo in teal next to the text reading techtarget set against a dark-blue background
    Image attribution tooltip
    Brand Experience Team/TechTarget
    Image attribution tooltip

    DEF CON bans social engineering expert Chris Hadnagy

    Hadnagy, an influential figure at the DEF CON security conference, was permanently banned following allegations of misconduct at the annual Las Vegas gathering.

    By Shaun Nichols • Feb. 10, 2022
  • The techtarget logo in teal next to the text reading techtarget set against a dark-blue background
    Image attribution tooltip
    Brand Experience Team/TechTarget
    Image attribution tooltip

    Ransomware groups shift from big game hunting

    A joint cybersecurity advisory documented top ransomware trends for 2021 and addressed ways for organizations to improve security.

    By Arielle Waldman • Feb. 9, 2022
  • The techtarget logo in teal next to the text reading techtarget set against a dark-blue background
    Image attribution tooltip
    Brand Experience Team/TechTarget
    Image attribution tooltip

    Russia continues cybercrime offensive with SkyFraud takedown

    Officials in Russia have knocked the SkyFraud credit card fraud operation offline in the latest of a string of police actions against cybercriminals in the region.

    By Shaun Nichols • Feb. 8, 2022
  • The techtarget logo in teal next to the text reading techtarget set against a dark-blue background
    Image attribution tooltip
    Brand Experience Team/TechTarget
    Image attribution tooltip

    DOJ recovers $3.6B from 2016 Bitfinex hack

    A couple was arrested Tuesday morning after the DOJ traced 120,000 bitcoin to a digital wallet containing funds stolen during the 2016 hack of cryptocurrency platform Bitfinex.

    By Peyton Doyle • Feb. 8, 2022
  • The techtarget logo in teal next to the text reading techtarget set against a dark-blue background
    Image attribution tooltip
    Brand Experience Team/TechTarget
    Image attribution tooltip
    What the metaverse means for IT pros, enterprises

    Metaverse rollout brings new security risks, challenges

    When companies and users decide to adapt the technologies of the coming metaverse, they will also expose themselves to a new class of security risks and vulnerabilities.

    By Shaun Nichols • Feb. 7, 2022
  • The techtarget logo in teal next to the text reading techtarget set against a dark-blue background
    Image attribution tooltip
    Brand Experience Team/TechTarget
    Image attribution tooltip

    Wormhole offers $10M to Ethereum thieves

    Wormhole also offered $10 million to anyone who provided 'information leading to the arrest and conviction of those responsible' for last week's heist.

    By Alexander Culafi • Feb. 7, 2022
  • The techtarget logo in teal next to the text reading techtarget set against a dark-blue background
    Image attribution tooltip
    Brand Experience Team/TechTarget
    Image attribution tooltip

    Cryptocurrency platform Wormhole loses $320M after attack

    After a threat actor made off with 120,000 wrapped Ethereum, Wormhole said the stolen cryptocurrency had been 'restored,' but what that means remains in question.

    By Alexander Culafi • Feb. 3, 2022
  • The techtarget logo in teal next to the text reading techtarget set against a dark-blue background
    Image attribution tooltip
    Brand Experience Team/TechTarget
    Image attribution tooltip

    Distrust, feuds building among ransomware groups

    In an industry that operates in anonymity, trust is everything -- but recent accusations of ransomware actors working with or being law enforcement is threatening that work model.

    By Arielle Waldman • Feb. 3, 2022
  • The techtarget logo in teal next to the text reading techtarget set against a dark-blue background
    Image attribution tooltip
    Brand Experience Team/TechTarget
    Image attribution tooltip

    SolarMarker malware spread through advanced SEO poisoning

    Sophos discovered SolarMarker malware was being distributed through fake SEO-focused topics in Google Groups, as well as malicious PDF files.

    By Alexander Culafi • Feb. 2, 2022
  • The techtarget logo in teal next to the text reading techtarget set against a dark-blue background
    Image attribution tooltip
    Brand Experience Team/TechTarget
    Image attribution tooltip

    More than 1,000 malware packages found in NPM repository

    Researchers with WhiteSource were able to find some 1,300 examples of malware hiding under the guise of legitimate JavaScript packages on the NPM repository.

    By Shaun Nichols • Feb. 2, 2022
  • The techtarget logo in teal next to the text reading techtarget set against a dark-blue background
    Image attribution tooltip
    Brand Experience Team/TechTarget
    Image attribution tooltip

    Iranian hacking groups pick up the pace with new attacks

    Two security vendors are reporting a fresh wave of targeted attacks and malware outbreaks believed to be the work of Iranian state-sponsored threat groups.

    By Shaun Nichols • Feb. 1, 2022
  • The techtarget logo in teal next to the text reading techtarget set against a dark-blue background
    Image attribution tooltip
    Brand Experience Team/TechTarget
    Image attribution tooltip

    Ransomware attacks continue to plague public services

    Ransomware this year has picked up right where 2021 left off, with several local governments, schools and health services across the U.S. suffering attacks.

    By Peyton Doyle • Feb. 1, 2022