Threats & Vulnerabilities: Page

SolarWinds hackers still active, using new techniques

CrowdStrike has tracked the latest threat activity and novel techniques from the SolarWinds hackers, a Russian state-sponsored group known as Cozy Bear.

By Arielle Waldman • Jan. 27, 2022

Log4j explained: Everything you need to know

Log4j, which is embedded in popular services and frameworks, became a headache for many businesses by the end of 2021. Businesses affected include Apple, Microsoft and VMware.

By Sean Kerner • Jan. 27, 2022

Apple security update fixes zero-day vulnerability

Apple released a series of security updates for bugs that included a critical zero-day vulnerability in iOS and macOS that is being actively exploited in the wild.

By Shaun Nichols • Jan. 27, 2022

DeadBolt ransomware targeting QNAP NAS storage devices

In addition to DeadBolt, QNAP NAS users have had to deal with multiple types of ransomware in recent months, including Qlocker and eCh0raix.

By Alexander Culafi • Jan. 26, 2022

Sophos: Log4Shell impact limited, threat remains

Sophos threat researcher Chet Wisniewski detailed the unexpectedly limited impact Log4Shell had on organizations but warned of future exploitation and risks.

By Arielle Waldman • Jan. 25, 2022

Bernalillo County ransomware attack still felt weeks later

A ransomware attack in early January disrupted government systems in New Mexico's largest county, which stalled operations at county offices and the county detention center.

By Peyton Doyle • Jan. 25, 2022

Monero and the complicated world of privacy coins

Monero is known for being one of the most common cryptocurrencies seen in illicit transactions, but its development community paints a different picture of the privacy coin.

By Alexander Culafi • Jan. 24, 2022

5 infosec predictions for 2022

If the predictions are correct, 2022 will be another groundbreaking year for information security. Have a look at the security forecast for the next 12 months.

By Kevin Hanes • Jan. 21, 2022

Crypto.com confirms $35M lost in cyber attack

The cryptocurrency exchange had claimed no customer funds were lost in the recent cyber attack, but now admits 4,836.26 ETH and 443.93 bitcoin was stolen.

By Arielle Waldman • Jan. 20, 2022

Cryptocurrency exchange Crypto.com hit by cyber attack

The cryptocurrency exchange said it detected unauthorized activity on some user accounts over the weekend, but questions remain on the severity of the attacks.

By Arielle Waldman • Jan. 18, 2022

Ukraine hit with destructive malware attacks amidst turmoil

A new type of destructive malware was discovered by Microsoft after public and private organizations in Ukraine endured a series of cyber attacks as tensions with Russia grow.

By Shaun Nichols • Jan. 18, 2022

Police seize VPN host allegedly facilitating ransomware

VPNLab is accused of facilitating cybercrime including ransomware and malware distribution, and its services were allegedly advertised on the dark web.

By Alexander Culafi • Jan. 18, 2022

Ransomware actors increasingly demand payment in Monero

Though Bitcoin is still the cryptocurrency standard in ransomware payment demands, Monero has gained prominence due to its more private, less traceable technology.

By Alexander Culafi • Jan. 18, 2022

Ukrainian police bust unnamed ransomware gang

A law enforcement raid in Ukraine resulted in the arrest of five suspects accused of deploying ransomware through phishing emails and making more than $1 million.

By Arielle Waldman • Jan. 13, 2022

Is ransomware as a service going out of style?

Increased government pressure has backed many ransomware gangs into a corner, in turn forcing attackers to replace the ransomware-as-a-service model with a smash-and-grab approach.

By Mike Behrmann • Jan. 13, 2022

click fraud (pay-per-click fraud)

Click fraud -- sometimes called 'pay-per-click fraud' -- is a type of fraud that artificially inflates traffic statistics for online advertisements.

By Alexander Gillis • Jan. 13, 2022

New RAT campaign abusing AWS, Azure cloud services

Cisco Talos discovered threat actors taking advantage of public cloud services to spread remote administration tools such as NanoCore, NetWire and AsyncRAT.

By Shaun Nichols • Jan. 12, 2022

Microsoft: China-based ransomware actor exploiting Log4Shell

According to Microsoft, a threat actor tracked as DEV-0401 is utilizing Night Sky ransomware in its Log4j attacks, a variant first reported Jan. 1 that targets large enterprises.

By Alexander Culafi • Jan. 11, 2022

SonicWall SMA 100 appliances beset by multiple vulnerabilities

SonicWall's security appliances can be compromised by several attacks on five vulnerabilities, including one remote code execution bug, according to Rapid7.

By Shaun Nichols • Jan. 11, 2022

NetUSB flaw could impact millions of routers

SentinelOne researcher Max Van Amerongen said the only way to fix the high-severity vulnerability is to update the router firmware, which can be a difficult process.

By Arielle Waldman • Jan. 11, 2022

Chainalysis: Cryptocurrency crime reaches all-time high

While illicit activity peaked at $14 billion in 2021, Chainalysis said it's a drop in the bucket compared with overall transactions amid 'roaring adoption' of cryptocurrency.

By Arielle Waldman • Jan. 10, 2022

honeynet

A honeynet is a network set up with intentional vulnerabilities hosted on a decoy server to attract hackers.

By Andrew Zola • Jan. 10, 2022

New Zloader attacks thwarting Microsoft signature checks

Check Point Software Technologies found a long-known trick of injecting code into valid file signatures remains effective for spreading malware such as Zloader.

By Shaun Nichols • Jan. 6, 2022

NY AG’s credential stuffing probe finds 1M exposed accounts

The threat of credential stuffing attacks prompted an investigation by the New York Attorney General, which found stolen passwords for customer accounts across 17 companies.

Jan. 5, 2022

FTC warns companies to mitigate Log4j vulnerability

In a blog post about the critical Log4Shell vulnerability, the FTC mentioned 2017's Equifax breach and the legal consequences that followed.

By Alexander Culafi • Jan. 5, 2022