Threats & Vulnerabilities: Page

One year later, SolarWinds hackers targeting cloud providers

The hacking crew accused of breaking into SolarWinds a year ago is back at it and is trying to get to their targets through attacks on the networks of cloud computing providers.

By Shaun Nichols • Dec. 6, 2021

Hundreds of new vulnerabilities found in SOHO routers

Researchers credited vendors for their swift response to reports of widespread security vulnerabilities but warned users to make sure firmware is updated to avoid attacks.

By Shaun Nichols • Dec. 3, 2021

Former Ubiquiti engineer arrested for inside threat attack

Nickolas Sharp is accused of attacking his former employer, stealing confidential data and attempting to extort the company into paying him approximately $2 million.

By Arielle Waldman • Dec. 2, 2021

New Yanluowang ransomware mounting targeted attacks in US

Symantec threat analysts observed the new ransomware operation abusing legitimate tools such as ConnectWise's remote access product to move laterally inside networks.

By Arielle Waldman • Dec. 1, 2021

BlackByte ransomware attacks exploiting ProxyShell flaws

Red Canary said BlackByte's campaign is using wormable ransomware against organizations vulnerable to ProxyShell flaws in Microsoft Exchange.

By Alexander Culafi • Dec. 1, 2021

Data governance vs. information governance: What’s the difference?

Data governance and information governance provide specific benefits for organizations looking to improve how they handle data.

By George Lawton • Nov. 30, 2021

Windows Installer zero-day under active exploitation

McAfee said the Windows Installer vulnerability is being exploited in 23 countries around the world, including the United States, China, India and others.

By Alexander Culafi • Nov. 30, 2021

Hack ‘Sabbath’: Elusive new ransomware detected

A newly uncovered ransomware operation, dubbed UNC2190 or "Sabbath," has roots in a previous ransomware group but has so far been able to operate mostly undetected.

By Shaun Nichols • Nov. 29, 2021

black hat hacker

A black hat hacker has been historically used to describe one who has malicious intent -- such as theft of information, fraud or disrupting systems -- but increasingly, more specific terms are being used to describe those people.

By Katie Terrell Hanna, Taina Teravainen • Nov. 24, 2021

Apple files lawsuit against spyware vendor NSO Group

Apple sued the Israeli technology vendor, whose Pegasus spyware has been implicated in several malicious attacks on journalists, activists and government officials.

By Arielle Waldman • Nov. 23, 2021

Researcher drops instant admin Windows zero-day bug

A newly-disclosed zero-day vulnerability in Windows could potentially allow local users to elevate their permissions to administrator status, and Microsoft has yet to post a fix.

By Shaun Nichols • Nov. 23, 2021

footprinting

Footprinting is an ethical hacking technique used to gather as much data as possible about a specific targeted computer system, an infrastructure and networks to identify opportunities to penetrate them.

By Andrew Zola • Nov. 23, 2021

cookie poisoning

Cookie poisoning is a type of cyber attack in which a bad actor hijacks, forges, alters or manipulates a cookie to gain unauthorized access to a user's account, open a new account in the user's name or steal the user's information for purposes such as identity theft.

By Rahul Awati • Nov. 23, 2021

GoDaddy discloses breach of 1.2M customer account details

Web hosting provider GoDaddy said an attacker broke into its Managed WordPress service and accessed the account details and SSL keys of 1.2 million customers.

By Shaun Nichols • Nov. 22, 2021

Cryptocurrency exchange BTC-Alpha confirms ransomware attack

While it is common for threat actors to use cryptocurrency platforms to move and obfuscate ransom payments, this time an exchange platform was the victim of such an attack.

By Arielle Waldman • Nov. 22, 2021

snooping

Snooping, in a security context, is unauthorized access to another person's or company's data.

By Andrew Froehlich • Nov. 22, 2021

Cybercriminals discuss new business model for zero-day exploits

Digital Shadows observed increased chatter on dark web forums about the possible emergence of a new business model that would rent out zero-day exploits as a service.

By Arielle Waldman • Nov. 19, 2021

Nimda

First appearing on September 18, 2001, Nimda is a computer virus that caused traffic slowdowns as it rippled across the internet.

By Katie Terrell Hanna • Nov. 19, 2021

CISA, Microsoft warn of rise in cyber attacks from Iran

CISA and Microsoft this week issued alerts about increased threat activity Iranian nation-state hacking groups, including ransomware attacks on enterprises.

By Shaun Nichols • Nov. 18, 2021

New side channel attack resurrects DNS poisoning threat

A new side channel attack would potentially allow attackers to poison DNS servers and reroute traffic to malicious sites.

By Shaun Nichols • Nov. 18, 2021

Malwarebytes slams Apple for inconsistent patching

At the center of the Apple criticism is an exploit chain that utilized two vulnerabilities -- one of which was only patched in macOS Big Sur for several months.

By Alexander Culafi • Nov. 17, 2021

FBI email system compromised to issue fake alerts

An unknown threat actor sent emails warning of a supply chain attack through an FBI portal used by law enforcement agencies to communicate with one another.

By Arielle Waldman • Nov. 15, 2021

ProxyShell leads to domain-wide ransomware attack

The domain-wide ransomware attack utilized "almost no malware," and the threat actor accomplished the attack with the months-old ProxyShell vulnerabilities.

By Alexander Culafi • Nov. 15, 2021

virus hoax

A virus hoax is a false warning about a computer virus.

By Katie Terrell Hanna • Nov. 15, 2021

Aruba Central breach exposed customer data

HPE-owned Aruba Networks said one of its cloud databases was accessed by hackers who were able to make off with location and telemetry data for its customers' Wi-Fi gear.

By Shaun Nichols • Nov. 11, 2021