Threats & Vulnerabilities: Page
-
Brand Experience Team/TechTarget
Bugs aplenty as VMware, Cisco and F5 drop security updates
Two critical updates from Cisco, remote code execution flaws in F5's Big-IP, and a half-dozen VMware security holes are among the more pressing issues for admins to address.
By Shaun Nichols • Aug. 25, 2021 -
Brand Experience Team/TechTarget
4 emerging ransomware groups take center stage
Four ransomware operations -- AvosLocker, Hive, HelloKitty and LockBit 2.0 -- have popped up on the radar of researchers with Palo Alto Network's Unit 42 team.
By Shaun Nichols • Aug. 24, 2021 -
Brand Experience Team/TechTarget
CISA: ProxyShell flaws being actively exploited, patch now
Security researchers weighed in with evidence of ProxyShell exploitation by threat actors using malicious web shells and a new ransomware variant called 'LockFile.'
By Alexander Culafi • Aug. 23, 2021 -
Brand Experience Team/TechTarget
spear phishing
Spear phishing is a malicious email spoofing attack that targets a specific organization or individual, seeking unauthorized access to sensitive information.
By Crystal Bedell, Mary Shacklett • Aug. 23, 2021 -
Brand Experience Team/TechTarget
ILOVEYOU virus
The ILOVEYOU virus comes in an email with 'ILOVEYOU' in the subject line and contains an attachment that, when opened, results in the message being re-sent to everyone in the recipient's Microsoft Outlook address book.
By Rahul Awati • Aug. 23, 2021 -
Brand Experience Team/TechTarget
Opinion
How attackers use open source intelligence against enterprises
Cato Networks' Etay Maor explains how cybercriminals use open source intelligence to detect and attack vulnerable enterprise networks and employees.
By Etay Maor • Aug. 18, 2021 -
Brand Experience Team/TechTarget
FBI watchlist exposed by misconfigured Elasticsearch cluster
A terrorist watchlist was found in an exposed database, and security researcher Bob Diachenko says there is no way of knowing just how long it was open to the public.
By Shaun Nichols • Aug. 16, 2021 -
Brand Experience Team/TechTarget
New ransomware crew hammers on PrintNightmare bugs
PrintNightmare, the Microsoft print spooler flaws patched in July, is the favorite target for a new ransomware group known as Vice Society, according to Cisco Talos.
By Shaun Nichols • Aug. 13, 2021 -
Brand Experience Team/TechTarget
Months after the Accellion breach, more victims emerge
The Accellion breach occurred last December, but more victims have come to light in recent weeks as investigations, notifications and disclosures stretch on through the summer.
By Arielle Waldman • Aug. 12, 2021 -
Brand Experience Team/TechTarget
Microsoft discloses new print spooler flaw without patch
The latest flaw in Windows print spooler software, which has yet to be patched, comes weeks after the PrintNightmare vulnerability and other related bugs.
By Alexander Culafi • Aug. 12, 2021 -
Brand Experience Team/TechTarget
Hackers selling access to breached networks for $10,000
Network access is a closely-guarded commodity in underground hacker forums, with some sellers not even revealing the names of their victims until money has changed hands.
By Shaun Nichols • Aug. 11, 2021 -
Brand Experience Team/TechTarget
‘ProxyShell’ Exchange bugs resurface after presentation
A critical vulnerability in Microsoft Exchange is once again making the rounds with attackers, following a Black Hat presentation from the researcher who found it.
By Shaun Nichols • Aug. 9, 2021 -
Brand Experience Team/TechTarget
Expert Advice
Is bitcoin safe? How to secure your bitcoin wallet
As bitcoin use increases, so too have the number of cyber attacks on cryptocurrency exchanges and wallets. Learn how to keep bitcoin use secure.
By Michael Cobb • Aug. 6, 2021 -
Brand Experience Team/TechTarget
Apple’s M1 silicon brings new challenges for malware defenders
Noted security researcher Patrick Wardle told Black Hat 2021 attendees that catching malware attacks on new macOS systems requires learning the subtleties of ARM64 architecture.
By Shaun Nichols • Aug. 6, 2021 -
Brand Experience Team/TechTarget
Hackers build a better timing attack to crack encryption keys
A new technique for cracking encryption keys can overcome the limitations of popular timing attacks by analyzing network packets, according to researchers at Black Hat 2021.
By Shaun Nichols • Aug. 5, 2021 -
Brand Experience Team/TechTarget
Mandiant: Microsoft 365 the ‘Holy Grail’ for nation-state hackers
Mandiant researchers discussed mailbox compromises, app registration abuse and new extensions of the Golden SAML attack technique against Microsoft 365 at Black Hat 2021.
By Alexander Culafi • Aug. 5, 2021 -
Brand Experience Team/TechTarget
Matt Tait warns of ‘stolen’ zero-day vulnerabilities
During Black Hat 2021, the COO of Corellium discussed three main threats that have ramped up: stolen zero days, zero days being exploited in the wild and supply chain attacks.
By Arielle Waldman • Aug. 4, 2021 -
Brand Experience Team/TechTarget
Supply chain attacks, IoT threats on tap for Black Hat 2021
Industry analysts say that evolving threats, real-world impacts and supply chain attacks will be among their hot topics at this year's Black Hat 2021 conference.
By Shaun Nichols • Aug. 4, 2021 -
Brand Experience Team/TechTarget
Hospitals at risk from security flaws in pneumatic tube systems
Researchers at IoT security vendor Armis said the nine critical vulnerabilities affect the pneumatic tube systems used by many hospitals in North America.
By Shaun Nichols • Aug. 2, 2021 -
Brand Experience Team/TechTarget
Cybersecurity consulting, MSSPs in channel spotlight
Channel companies have put a premium on cybersecurity services in 2021. The latest round of market activity features Deloitte and Epiphany Systems; other news.
By John Moore • July 30, 2021 -
Brand Experience Team/TechTarget
Recent surge in ransomware attacks threatens national security
Some recent ransomware attacks that have disrupted service include Colonial Pipeline, JBS Foods and Quanta.
By Andy Patrizio • July 30, 2021 -
Brand Experience Team/TechTarget
CISA unveils list of most targeted vulnerabilities in 2020
Attackers chased the headlines in 2020, going after the most publicized vulnerabilities in Citrix, Pulse Secure and Fortinet products, according to the U.S. government.
By Shaun Nichols • July 28, 2021 -
Brand Experience Team/TechTarget
New ‘BlackMatter’ ransomware gang has echoes of REvil
Although connections are being made between ransomware groups REvil and BlackMatter, the jury is still out on whether they have threat actors in common.
By Alexander Culafi • July 28, 2021 -
Brand Experience Team/TechTarget
Coveware: Median ransomware payment down 40% in Q2 2021
Coveware CEO Bill Siegel said that the efficacy of using data leak threats to obtain ransomware payments has gone down because 'you don't get anything in return when you pay.'
By Alexander Culafi • July 26, 2021 -
Brand Experience Team/TechTarget
Gartner: ‘Weaponized’ operational tech poses grave danger
New research by Gartner analyst Wam Voster warns that while attacks in the IT world can lead to loss of information, attacks in the OT world can lead to loss of life.
By Arielle Waldman • July 26, 2021
Previous
