Threats & Vulnerabilities: Page
-
Brand Experience Team/TechTarget
‘LightBasin’ hackers spent 5 years hiding on telco networks
A state-sponsored hacking group has been moving undetected on the networks of more than a dozen telecommunications providers, observing traffic and collecting data for years.
By Shaun Nichols • Oct. 20, 2021 -
Brand Experience Team/TechTarget
Federal agencies issue warning on BlackMatter ransomware
U.S. government agencies say a new family of malware could create problems for critical infrastructure by shutting down critical networks and disrupting commerce.
By Shaun Nichols • Oct. 19, 2021 -
Brand Experience Team/TechTarget
Sinclair Broadcast Group suffers ransomware attack, breach
The media giant disclosed a ransomware attack Monday that caused massive disruptions across networks and saw threat actors obtain corporate data.
By Arielle Waldman • Oct. 18, 2021 -
Brand Experience Team/TechTarget
Burned by Apple, researchers mull selling zero days to brokers
Security researchers have grown frustrated with Apple's lack of communication, ‘silent patching’ of vulnerabilities, denial of bug bounty rewards and other issues.
By Alexander Culafi • Oct. 15, 2021 -
Brand Experience Team/TechTarget
Google digs into Iran’s APT35 hacking group
Covert phishing tactics and cleverly disguised notifications are among the calling cards of the increasingly sophisticated operation aimed at Iran's opponents.
By Shaun Nichols • Oct. 14, 2021 -
Brand Experience Team/TechTarget
How hackers exploited RCE vulnerabilities in Atlassian, Azure
Barracuda researchers examined exploitation activity and attack patterns for two remote code execution vulnerabilities affecting Atlassian's Confluence and Microsoft's Azure.
By Shaun Nichols • Oct. 13, 2021 -
Brand Experience Team/TechTarget
Apple patches iOS vulnerability actively exploited in the wild
Apple said in a security advisory that it had received a report that the iOS flaw, which impacts kernel extension IOMobileFrameBuffer, 'may have been actively exploited.'
By Alexander Culafi • Oct. 12, 2021 -
Brand Experience Team/TechTarget
Iranian password spraying campaign hits Office 365 accounts
The Iran-backed DEV-0343 threat group has launched a password spraying offensive against Office 365 accounts in the defense, maritime and oil industries.
By Shaun Nichols • Oct. 11, 2021 -
Brand Experience Team/TechTarget
decompression bomb (zip bomb, zip of death attack)
A decompression bomb -- also known as a zip bomb or zip of death attack -- is a malicious archive file containing a large amount of compressed data.
By Linda Rosencrance • Oct. 7, 2021 -
Brand Experience Team/TechTarget
Apache HTTP Server vulnerability under active attack
Security experts are urging administrators to update their installations of Apache HTTP Server following the disclosure of a zero-day vulnerability that had been under attack.
By Shaun Nichols • Oct. 6, 2021 -
Brand Experience Team/TechTarget
Iranian hackers abusing Dropbox in cyberespionage campaign
A group of hackers believed to be based in Iran is targeting organizations in the U.S. and elsewhere with a campaign that uses cloud storage service Dropbox.
By Shaun Nichols • Oct. 6, 2021 -
Brand Experience Team/TechTarget
Twitch confirms data breach following massive leak
Leakers claim to have stolen almost 6,000 internal Git repositories, including 'the entirety of Twitch.tv' and content creator payouts.
By Alexander Culafi • Oct. 6, 2021 -
Brand Experience Team/TechTarget
2 suspected ransomware operators arrested in Ukraine
A coordinated international law enforcement operation led to the arrest of two alleged ransomware operators, though the ransomware gang has not been identified.
By Arielle Waldman • Oct. 4, 2021 -
Brand Experience Team/TechTarget
IP spoofing
Internet Protocol (IP) spoofing is a type of malicious attack where the threat actor hides the true source of IP packets to make it difficult to know where they came from.
By Ben Lutkevich, Linda Rosencrance • Oct. 1, 2021 -
Brand Experience Team/TechTarget
Get started with the Ghidra reverse-engineering framework
Malware analysts use Ghidra to examine code to better understand how it works. Learn what to expect from the reverse-engineering framework, how to start using it and more.
By Kyle Johnson • Sept. 30, 2021 -
Brand Experience Team/TechTarget
Researchers hack Apple Pay, Visa ‘Express Transit’ mode
Academic researchers discover an attack technique that enables them to make fraudulent transactions on locked iPhones when Apple Pay and Visa cards are set up for transit mode.
By Arielle Waldman • Sept. 30, 2021 -
Brand Experience Team/TechTarget
Telegram bots allowing hackers to steal OTP codes
A simplified new attack tool based on Telegram scripts is allowing criminals to steal one-time password credentials and take over user accounts and drain bank funds.
By Shaun Nichols • Sept. 29, 2021 -
Brand Experience Team/TechTarget
Group-IB CEO Ilya Sachkov charged with treason in Russia
Group-IB maintains the innocence of CEO and founder Ilya Sachkov and said that co-founder and CTO Dmitry Volkov will assume leadership of the company.
By Alexander Culafi • Sept. 29, 2021 -
Brand Experience Team/TechTarget
Ransomware: Has the U.S. reached a tipping point?
The ransomware problem has grown more severe in recent years due to a growing number of attacks against large organizations and the standardization of double-extortion tactics.
By Alexander Culafi • Sept. 28, 2021 -
Brand Experience Team/TechTarget
SolarWinds hackers Nobelium spotted using a new backdoor
Microsoft researchers believe Nobelium, the Russian-backed group that breached SolarWinds, has been using a backdoor tool called FoggyWeb since at least April.
By Shaun Nichols • Sept. 28, 2021 -
Brand Experience Team/TechTarget
Spurned researcher posts trio of iOS zero days
An anonymous bug hunter critical of Apple's handling of reports to its bounty program has released details on three zero-day vulnerabilities in its iOS mobile platform.
By Shaun Nichols • Sept. 24, 2021 -
Brand Experience Team/TechTarget
Turla deploying ‘secondary’ backdoor in state-sponsored attacks
Cisco Talos said hackers connected to the Russian APT Turla are using a new piece of malware to get persistent access on infected networks in the U.S., Germany and Afghanistan.
By Shaun Nichols • Sept. 22, 2021 -
Brand Experience Team/TechTarget
Marcus & Millichap hit with possible BlackMatter ransomware
The real estate firm confirmed in a SEC filing this week that it had suffered a recent cyber attack but claimed there was no 'material disruption' to its business.
By Alexander Culafi • Sept. 22, 2021 -
Brand Experience Team/TechTarget
Treasury Department sanctions cryptocurrency exchange Suex
In the ongoing battle against ransomware attacks, the Treasury Department sanctioned Suex, a cryptocurrency exchange accused of laundering ransom payments.
By Arielle Waldman • Sept. 21, 2021 -
Brand Experience Team/TechTarget
email virus
An email virus consists of malicious code distributed in email messages to infect one or more devices.
By Linda Rosencrance, Rahul Awati • Sept. 21, 2021
Previous
