Threats & Vulnerabilities: Page

Threat actors target HPE iLO hardware with rootkit attack

Integrated Lights Out, HPE's remote server management platform, has been compromised by intruders who are using it to install a hard-to-detect rootkit in the wild.

By Shaun Nichols • Dec. 30, 2021

Everything you need to know about ProxyShell vulnerabilities

Organizations need to patch their Exchange Servers to protect against the ProxyShell exploit. Learn how to do that and more here.

By Brien Posey • Dec. 29, 2021

ManageEngine attacks draw warning from FBI

The FBI said a vulnerability in the ManageEngine Desktop Central IT management tool is being used by APT actors in targeted network attacks dating back to October.

By Shaun Nichols • Dec. 23, 2021

5 Russians charged in hacking, illegal trading scheme

A group of hackers based in Russia and tied to the GRU stand accused of breaking into companies and using confidential data to profit from illegal stock trades.

By Shaun Nichols • Dec. 20, 2021

Log4j 2.17.0 fixes newly discovered exploit

The Log4j 2.17.0 update is the third of its kind since Log4Shell was disclosed and the mass exploitation began. Versions 2.15.0 and 2.16.0 patched remote code execution bugs.

By Alexander Culafi • Dec. 20, 2021

Log4j gets a second update as security woes pile up

Administrators who were already scrambling to patch up the Log4Shell flaw are now being advised to update to Log4j version 2.16.0 following the discovery of issues in 2.15.0.

By Shaun Nichols • Dec. 15, 2021

Nation-state threat groups are exploiting Log4Shell

Multiple nation-state actors are taking advantage of the critical log4j 2 vulnerability, making mitigation even more urgent for some enterprises and government agencies.

By Arielle Waldman • Dec. 15, 2021

6 IoT security layers to shape the ultimate defense strategy

IT administrators can divide and conquer their defense strategy with IoT security layers that ensure data protection from its generation in devices to its storage in the cloud.

By Kristen Gloss • Dec. 15, 2021

‘Insane’ spread of Log4j exploits won’t abate anytime soon

Experts say that the explosion in exploits for CVE-2021-44228 is only the early phase of what will be a long and tedious road to remediation for the critical vulnerability.

By Shaun Nichols • Dec. 15, 2021

Hive ransomware claims hundreds of victims in 6-month span

Group-IB research has revealed that Hive ransomware-as-a-service operations are back and busier than ever, with a rapidly growing victim list over a short amount of time.

By Arielle Waldman • Dec. 14, 2021

Log4Shell: Experts warn of bug’s severity, reach

Check Point Research said in a blog post 'anyone can make a Log4Shell exploit,' as it only requires a single string of malicious code.

By Alexander Culafi • Dec. 14, 2021

Chernobyl virus

The Chernobyl virus is a computer virus with a potentially devastating payload that destroys all computer data when an infected file is executed.

By Katie Terrell Hanna • Dec. 14, 2021

Fixes for Log4j flaw arise as attacks soar

Exploits against the Log4j security vulnerability are already commonplace just days after its disclosure, but some vendors are already offering mitigations and detection tools.

By Shaun Nichols • Dec. 13, 2021

Critical Log4j flaw exploited a week before disclosure

The Apache Software Foundation first found out about the Log4j 2 vulnerability in late November, but Cisco and Cloudflare detected exploitation in the wild shortly after.

By Alexander Culafi • Dec. 13, 2021

Dark web posts shed light on Panasonic breach

A network breach at Japanese electronics giant Panasonic was possibly set up as far back as January, according to researchers who were monitoring dark web forums.

By Shaun Nichols • Dec. 10, 2021

Critical Apache Log4j 2 bug under attack; mitigate now

The Log4j 2 flaw has a base CVSS score of 10 and enables remote code execution against applications, cloud services and PC games with vulnerable configurations.

By Alexander Culafi • Dec. 10, 2021

evil twin attack

An evil twin attack is a rogue Wi-Fi access point (AP) that masquerades as a legitimate one, enabling an attacker to gain access to sensitive information without the end user's knowledge.

By Katie Terrell Hanna • Dec. 10, 2021

17 Discord malware packages found in NPM repository

These latest reports of Discord malware follow a trend of threat actors using open source software repositories to host malware, two JFrog researchers said.

By Alexander Culafi • Dec. 9, 2021

Threat actors targeting MikroTik routers, devices

Eclypsium researchers found vulnerable MikroTik devices have become a popular target for threat actors, who are exploiting known flaws that remain unpatched.

By Arielle Waldman • Dec. 9, 2021

Elk Cloner

Elk Cloner is the first personal computer virus or self-replicating program known to have spread in the wild on a large scale.

By Rahul Awati • Dec. 8, 2021

BadgerDAO users’ cryptocurrency stolen in cyber attack

Following last week's attack, BadgerDAO sent the threat actor a message, offering to 'compensate' the individual for finding a vulnerability in the company's systems.

By Arielle Waldman • Dec. 7, 2021

Google takes action against blockchain-based Glupteba botnet

In a legal complaint made public Tuesday, Google said that it "has been and continues to be directly injured" by the actions of the Glupteba botnet.

By Alexander Culafi • Dec. 7, 2021

Why image-based phishing emails are difficult to detect

Image-based phishing emails are becoming increasingly popular with attackers. Learn how these hard-to-detect scams bypass email filters to infiltrate victims' systems.

By Sébastien Goutal • Dec. 7, 2021

Melissa virus

Melissa was a type of email virus that initially become an issue in early 1999.

By Alexander Gillis • Dec. 7, 2021

BitMart the latest crypto exchange to suffer cyber attack

BitMart, which describes itself as the 'most trusted crypto trading platform,' confirmed it was the victim of an attack where $150 million in assets were stolen.

By Arielle Waldman • Dec. 6, 2021