Threats & Vulnerabilities: Page
-
Brand Experience Team/TechTarget
Italian Mafia implicated in massive cybercrime network
A recent spate of phishing attacks and SMS fraud scams in Spain is being blamed on cybercriminals who were operating from the Canary Islands with backing from the Italian mob.
By Shaun Nichols • Sept. 20, 2021 -
Brand Experience Team/TechTarget
Microsoft details ‘OMIGOD’ Azure vulnerability fixes, threats
Microsoft fixed the open source OMI software during last week's Patch Tuesday, but the tech giant has struggled to get the updated agents to Azure customers.
By Alexander Culafi • Sept. 20, 2021 -
Brand Experience Team/TechTarget
Bitdefender releases REvil universal ransomware decryptor
The REvil decryptor key helps victims recover their encrypted files, as long as the attacks were made before July 13, which is when REvil went off the grid for two months.
By Alexander Culafi • Sept. 16, 2021 -
Brand Experience Team/TechTarget
ExpressVPN stands behind CIO named in UAE hacking scandal
ExpressVPN said it will not cut ties with CIO Daniel Gericke, who was implicated by the DOJ in state-sponsored hacking on behalf of the United Arab Emirates government.
By Shaun Nichols • Sept. 16, 2021 -
Brand Experience Team/TechTarget
browser hijacker (browser hijacking)
A browser hijacker is a malware program that modifies web browser settings without the user's permission and redirects the user to websites the user had not intended to visit.
By Alexander Gillis, Linda Rosencrance • Sept. 16, 2021 -
Brand Experience Team/TechTarget
‘OMIGOD’ vulnerabilities put Azure customers at risk
OMI, the software agent at the center of a remote code execution flaw, is "just one example" of silent, pre-installed software in cloud environments, according to one researcher.
By Alexander Culafi • Sept. 15, 2021 -
Brand Experience Team/TechTarget
McAfee discovers Chinese APT campaign ‘Operation Harvest’
McAfee Enterprise found the threat actors had not only breached a company's network, but had spent 'multiple years' siphoning data from the victim before getting caught.
By Shaun Nichols • Sept. 15, 2021 -
Brand Experience Team/TechTarget
Google patches actively exploited Chrome zero-days
Two more vulnerabilities in Google's web browser joined a growing list of Chrome zero-days that have been actively exploited in the wild this year.
By Arielle Waldman • Sept. 14, 2021 -
Brand Experience Team/TechTarget
The consequences of the SolarWinds breach
SolarWinds CEO: Breach transparency ‘painful’ but necessary
SolarWinds CEO Sudhakar Ramakrishna discusses his company's ongoing breach investigation, shares lessons learned from the attack and cautions IT pros on zero trust.
By Rob Wright • Sept. 14, 2021 -
Brand Experience Team/TechTarget
Apple patches zero-day, zero-click NSO Group exploit
The Citizen Lab said that it found the Apple zero-day vulnerability when it was 'analyzing the phone of a Saudi activist infected with NSO Group's Pegasus spyware.'
By Alexander Culafi • Sept. 14, 2021 -
Brand Experience Team/TechTarget
Hackers port Cobalt Strike attack tool to Linux
An unknown group of cybercriminals has created a version of the Windows-only Cobalt Strike Beacon tool that works against Linux machines, which has been used in recent attacks.
By Shaun Nichols • Sept. 13, 2021 -
Brand Experience Team/TechTarget
‘Azurescape’: New Azure vulnerability fixed by Microsoft
The Azure Container Instances vulnerability would have allowed malicious actors to execute code on other customers' containers, but there have been no reports of exploitation.
By Alexander Culafi • Sept. 9, 2021 -
Brand Experience Team/TechTarget
macro virus
A macro virus is a computer virus written in the same macro language used to create software programs such as Microsoft Excel or Word.
By Linda Rosencrance, Rahul Awati • Sept. 9, 2021 -
Brand Experience Team/TechTarget
Microsoft zero-day flaw exploited in the wild
Microsoft and the Cybersecurity and Infrastructure Security Agency have issued advisories warning users to mitigate against a zero-day flaw, as no patch has been released.
By Arielle Waldman • Sept. 8, 2021 -
Brand Experience Team/TechTarget
ProxyShell attacks ramping up on unpatched Exchange Servers
Security experts say active attacks on the series of Microsoft Exchange Server flaws, which can be chained to take control of servers, are already being launched in the wild.
By Shaun Nichols • Sept. 7, 2021 -
Brand Experience Team/TechTarget
Accellion-related breach disclosures continue to unfold
Beaumont Health disclosed some patient data was exposed through an attack on Accellion's FTA product, nine months after the attack on the legacy file transfer software occurred.
By Arielle Waldman • Sept. 2, 2021 -
Brand Experience Team/TechTarget
Autodesk targeted in SolarWinds hack
Autodesk said in its 10-Q filing released Wednesday that it believes 'no customer operations or Autodesk products were disrupted' in the SolarWinds supply chain attack.
By Alexander Culafi • Sept. 2, 2021 -
Brand Experience Team/TechTarget
Atlassian Confluence flaw under active attack
Administrators are advised to patch immediately after security experts confirmed mass scanning and exploits against a critical remote code execution vulnerability.
By Shaun Nichols • Sept. 1, 2021 -
Brand Experience Team/TechTarget
Beware of proxyware: Connection-sharing services pose risks
Cisco Talos warns that sharing internet connections with random people via third-party app like Honeygain and Peer2Profit could lead to malware installations and other threats.
By Shaun Nichols • Sept. 1, 2021 -
Brand Experience Team/TechTarget
College students targeted by money mule phishing techniques
Back to fool: University students with little security training are being targeted by Nigerian scammers to move fraudulent funds with the lure of quick bucks and flexible hours.
By Shaun Nichols • Aug. 31, 2021 -
Brand Experience Team/TechTarget
New ‘ProxyToken’ Exchange Server vulnerability disclosed
The Exchange Server vulnerability could allow an attacker 'to copy all emails addressed to a target and account and forward them to an account controlled by the attacker.'
By Alexander Culafi • Aug. 30, 2021 -
Brand Experience Team/TechTarget
logic bomb
A logic bomb is a string of malicious code that is inserted intentionally into a program to harm a network when certain conditions are met.
By Laura Fitzgibbons, Rahul Awati • Aug. 30, 2021 -
Brand Experience Team/TechTarget
Researchers discover critical flaw in Azure Cosmos DB
Wiz security researchers found a new attack vector in Microsoft Azure, which if exploited could allow an attacker to gain access to customers primary keys.
By Arielle Waldman • Aug. 27, 2021 -
Brand Experience Team/TechTarget
T-Mobile offers details of data breach that affected 40M
According to T-Mobile, the hackers who stole its customer database had knowledge of the company's network and testing setup. The hack was a carefully planned network breach.
By Shaun Nichols • Aug. 27, 2021 -
Brand Experience Team/TechTarget
Microsoft finally issues ProxyShell security advisory
The ProxyShell advisory includes a call to patch, as well as details on which Exchange servers are vulnerable. In short: Those without the May security update are unprotected.
By Alexander Culafi • Aug. 26, 2021
Previous
