Threats & Vulnerabilities: Page

Trend Micro reveals ‘Void Balaur’ cybermercenary group

New Trend Micro research revealed a cybermercenary group that has been actively targeting high-profile organizations and individuals across the globe since 2015.

By Arielle Waldman • Nov. 11, 2021

Citrix DDOS bug leaves networks vulnerable

Citrix patched a critical bug in its Application Delivery Controller and Gateway software that left networks open to DDOS attacks. It also fixed a less-severe SD-WAN WANOP bug.

By Madelaine Millar • Nov. 11, 2021

‘King of Fraud’ sentenced for Methbot botnet operation

Aleksandr Zhukov was sentenced to 10 years in prison for the theft of $7 million in a massive digital advertising fraud operation using his 'Methbot' botnet.

By Alexander Culafi • Nov. 11, 2021

US targets REvil, DarkSide ransomware with $10M rewards

Infosec experts weigh in on the U.S. government's latest tactic to thwart ransomware operations -- the offering of rewards of up to $10 million for information on operators.

By Arielle Waldman • Nov. 10, 2021

Medical devices at risk from Siemens Nucleus vulnerabilities

Thirteen bugs, including a critical security flaw, have been patched in the Siemens Nucleus TCP/IP stack, a vital component for millions of connected medical devices.

By Shaun Nichols • Nov. 9, 2021

DOJ charges REvil ransomware members, seizes $6.1M

One of the accused cybercriminals, who was directly involved in the ransomware attack on Kaseya earlier this year, was arrested and faces extradition from Poland.

By Shaun Nichols • Nov. 8, 2021

REvil ransomware affiliates arrested in international takedown

Europol said the two suspected REvil affiliates were allegedly responsible for 5,000 ransomware infections and received approximately half a million euros in ransom payments.

By Alexander Culafi • Nov. 8, 2021

Routers, NAS and phones hacked in Pwn2Own competition

Security researchers have spent the week attempting to break into network-connected hardware and other devices in hopes of winning recognition and big payouts.

By Shaun Nichols • Nov. 5, 2021

cross-site scripting (XSS)

Cross-site scripting (XSS) is a type of injection attack in which a threat actor inserts data, such as a malicious script, into content from otherwise trusted websites.

By Ben Lutkevich, Linda Rosencrance • Nov. 5, 2021

cache poisoning

Cache poisoning is a type of cyber attack in which attackers insert fake information into a domain name system (DNS) cache or web cache for the purpose of harming users.

By Rahul Awati • Nov. 5, 2021

DDoS botnet exploiting known GitLab vulnerability

A botnet is using a critical GitLab vulnerability, which was disclosed and patched in April, to launch powerful DDoS attacks that have surpassed 1 Tbps.

By Alexander Culafi • Nov. 4, 2021

CISA requires agencies to patch nearly 300 vulnerabilities

The Cybersecurity and Infrastructure Security Agency issued a directive for government agencies that requires patching for hundreds of known software security vulnerabilities.

By Shaun Nichols • Nov. 3, 2021

BlackMatter claims to shut down ransomware operations

Operators behind the ransomware, known to target critical infrastructure, attributed the shutdown to pressure from authorities and the disappearance of team members.

By Arielle Waldman • Nov. 3, 2021

Trojan Source bugs enable ‘invisible’ source code poisoning

A pair of flaws in nearly every popular programming language enables attackers to hide malicious code in plain sight without the ability to be detected prior to compiling.

By Shaun Nichols • Nov. 2, 2021

FBI: Ransomware gangs using financial info to target companies

The FBI assessed that ransomware threat actors are likely using information like mergers, acquisitions and stock valuations to determine vulnerable enterprise targets.

By Alexander Culafi • Nov. 2, 2021

Why cloud bugs don’t get CVEs, and why it’s an issue

Lack of public disclosures for cloud bugs can allow vendors to sit on vulnerability reports and can prevent researchers from getting acknowledgement and payouts.

By Shaun Nichols • Nov. 2, 2021

shoulder surfing

Shoulder surfing is using direct observation techniques, such as looking over someone's shoulder, to get information.

By Katie Terrell Hanna • Oct. 29, 2021

Europol ‘targets’ 12 suspects in ransomware bust

Europol has not said whether the suspected ransomware actors were arrested or detained, but the 12 were allegedly involved in attacks that affected 1,800 victims in 71 countries.

By Alexander Culafi • Oct. 29, 2021

Hackers upping SSL usage for encrypted attacks, communications

A report from cloud security vendor Zscaler found that cybercriminals are using secure connections to evade detection while carrying out network attacks.

By Shaun Nichols • Oct. 28, 2021

Avast releases decryptors for multiple ransomware strains

Victims of three separate ransomware families can now recover data using tools developed by the antivirus vendor with help from a malware analyst and an alleged Babuk developer.

By Arielle Waldman • Oct. 28, 2021

Researcher cracks 70% of neighborhood Wi-Fi passwords

A CyberArk researcher showed that $50 worth of hardware and some attack scripts are all you need to break into home and small business Wi-Fi networks.

By Shaun Nichols • Oct. 26, 2021

Emsisoft cracked BlackMatter ransomware, recovered victims’ data

Emsisoft developed a decryptor for BlackMatter and also found vulnerabilities in about a dozen other ransomware families that can be used to recover victims' data.

By Arielle Waldman • Oct. 25, 2021

SolarWinds hackers attacking more IT supply chain targets

According to Microsoft, the Russian threat group known as Nobelium has already compromised 14 technology service providers across the United States and Europe.

By Alexander Culafi • Oct. 25, 2021

script kiddie

Script kiddie is a derogative term that computer hackers coined to refer to immature, but often just as dangerous, exploiters of internet security weaknesses.

By Ben Lutkevich • Oct. 21, 2021

5 questions to ask when creating a ransomware recovery plan

These 'five W's of ransomware' will help organizations ask the right questions when creating a ransomware-specific disaster recovery plan.

By Dustin Milberg • Oct. 20, 2021