Threats & Vulnerabilities: Page
-
Brand Experience Team/TechTarget
U.K. man arrested in connection with 2020 Twitter breach
A 22-year-old U.K. resident was arrested in Spain and will face extradition on charges related to a social engineering operation that netted big-name Twitter accounts.
By Shaun Nichols • July 21, 2021 -
Brand Experience Team/TechTarget
Hackers embrace 5-day workweeks, unpatched vulnerabilities
Bad guys are taking the weekends off too, according to Barracuda Networks, and old bugs that should have been patched months ago continue to be the most-targeted vulnerabilities.
By Shaun Nichols • July 21, 2021 -
Brand Experience Team/TechTarget
US charges members of APT40, Chinese state-sponsored group
The Department of Justice accused four Chinese nationals of hacking into a variety of businesses between 2011 and 2018 to steal trade secrets and other valuable data.
By Arielle Waldman • July 19, 2021 -
Brand Experience Team/TechTarget
US government formally names China in Exchange Server hack
Beyond the Exchange Server hack, the White House's statement condemned China for its malicious cyber behavior and accused the country of government-affiliated ransomware attacks.
By Alexander Culafi • July 19, 2021 -
Brand Experience Team/TechTarget
US government launches ‘StopRansomware’ site
In the latest initiatives to combat ransomware, the new website provides individuals and organizations with services and tools to help reduce the risk of attacks.
By Arielle Waldman • July 15, 2021 -
Brand Experience Team/TechTarget
SonicWall warns of ‘imminent’ SMA 100/SRA ransomware attacks
SonicWall said that those who fail to update or disconnect their vulnerable SMA 100 and SRA devices are 'at imminent risk of a targeted ransomware attack.'
By Alexander Culafi • July 15, 2021 -
Brand Experience Team/TechTarget
Microsoft’s ‘PrintNightmare’ lingers, requires new patches
July's Patch Tuesday update includes critical fixes, but one well-known remote code execution bug might remain open for those with specific registry key settings.
By Shaun Nichols • July 14, 2021 -
Brand Experience Team/TechTarget
Microsoft: Chinese threat actor exploited SolarWinds zero-day
Microsoft has observed DEV-0322, the threat actor exploiting the SolarWinds Serv-U zero-day, 'targeting entities in the U.S. Defense Industrial Base Sector and software companies.'
By Alexander Culafi • July 14, 2021 -
Brand Experience Team/TechTarget
Schneider Electric PLCs vulnerable to remote takeover attacks
The authentication bypass vulnerability is a symptom of a much larger security crisis plaguing industrial control hardware, according to researchers who found the bug.
By Shaun Nichols • July 13, 2021 -
Brand Experience Team/TechTarget
SolarWinds warns of zero-day vulnerability under attack
SolarWinds says targeted attacks from a single threat actor have been reported on a previously unknown vulnerability in the Serv-U file transfer platform.
By Shaun Nichols • July 12, 2021 -
Brand Experience Team/TechTarget
Dutch researchers shed new light on Kaseya vulnerabilities
Dutch security researchers were working with Kaseya to get an authentication bypass flaw and other bugs patched when the catastrophic supply chain attack occurred.
By Shaun Nichols • July 8, 2021 -
Brand Experience Team/TechTarget
Kaseya post-attack VSA deployment delayed until Sunday
Kaseya CEO Fred Voccola said in an early Wednesday video update that the VSA deployment delay was 'probably the hardest decision I've had to make in my career.'
By Alexander Culafi • July 8, 2021 -
Brand Experience Team/TechTarget
Microsoft posts emergency ‘PrintNightmare’ patch
The out-of-band patch release addresses a critical flaw that allowed threat actors to gain remote code execution on vulnerable Windows and Windows Server systems.
By Shaun Nichols • July 7, 2021 -
Brand Experience Team/TechTarget
Kaseya ransomware attacks: What we know so far
REvil ransomware threat actors exploited a zero-day vulnerability to issue ransomware payloads disguised as legitimate software updates from Kaseya.
By Shaun Nichols • July 6, 2021 -
Brand Experience Team/TechTarget
Kaseya: 1,500 organizations affected by REvil attacks
Approximately 50 managed service providers and up to 1,500 of their customers were compromised via a devastating supply chain attack on Kaseya by REvil ransomware actors.
By Rob Wright • July 6, 2021 -
Brand Experience Team/TechTarget
Russia using Kubernetes cluster for brute-force attacks
The NSA warned that Russian state-sponsored hackers launched a new container-based campaign aimed at breaching networks and stealing essential data from multiple industries.
By Shaun Nichols • July 2, 2021 -
Brand Experience Team/TechTarget
European police lay siege to hacker haven DoubleVPN
An international law enforcement operation shut down DoubleVPN, a Dutch-hosted service that had provided low-cost, underground anonymizing services to cybercriminals.
By Shaun Nichols • June 30, 2021 -
Brand Experience Team/TechTarget
Alleged creator of Gozi banking Trojan arrested in Colombia
Romanian Mihai Ionut Paunescu, known as 'Virus,' was charged with two other supposed creators of the Gozi malware back in 2012, but Paunescu is the only one not to be extradited.
By Alexander Culafi • June 30, 2021 -
Brand Experience Team/TechTarget
active attack
An active attack is a network exploit in which a hacker attempts to make changes to data on the target or data en route to the target.
By TechTarget Contributor • June 30, 2021 -
Brand Experience Team/TechTarget
End users in the dark about latest cyberthreats, attacks
A study from IoT security vendor Armis shows many outside the IT community are unaware of growing threats, leaving a major gap in knowledge of basic security practices.
By Shaun Nichols • June 29, 2021 -
Brand Experience Team/TechTarget
SolarWinds hackers compromised Microsoft support agent
After placing information-stealing malware on a customer support agent's system, the Nobelium threat actors gained access to three Microsoft clients.
By Arielle Waldman • June 28, 2021 -
Brand Experience Team/TechTarget
DarkSide ransomware funded by cybercriminal ‘investors’
New ransomware gangs, such as DarkSide, are receiving cryptocurrency investments from their peers and are poised to make life difficult for enterprises and law enforcement alike.
By Shaun Nichols • June 28, 2021 -
Brand Experience Team/TechTarget
Atlassian moves to lock down accounts from takeover bugs
Check Point Research uncovered a set of flaws that, if chained together, would have enabled attackers to hijack accounts with single sign-on enabled.
By Shaun Nichols • June 24, 2021 -
Brand Experience Team/TechTarget
Namecheap refines strategy to fight malicious domains
Security researchers this month noted drastic improvements in the domain registrar's effort to respond to and mitigate reports of malicious and fraudulent sites.
By Arielle Waldman • June 24, 2021 -
Brand Experience Team/TechTarget
Dell BIOSConnect flaws affect 30 million devices
Eclypsium researchers discovered vulnerabilities that, if exploited, can allow remote code execution in a pre-boot environment for 128 different Dell products.
By Alexander Culafi • June 24, 2021
Previous
