Threats & Vulnerabilities: Page
-
Brand Experience Team/TechTarget
COVID, gift cards and phony acquisitions top BEC attack trends
New research from Cisco Talos shows cybercriminals are still using the COVID-19 pandemic for BEC attacks to steal millions, but in slightly different ways.
By Shaun Nichols • June 22, 2021 -
Brand Experience Team/TechTarget
Biden proposes critical infrastructure safe zones for hacking
The U.S. wants Russia to agree to make critical infrastructure targets off limits to hacking, but some infosec experts are skeptical such an agreement can be enforced.
By Shaun Nichols • June 21, 2021 -
Brand Experience Team/TechTarget
6 suspected Clop ransomware gang members arrested in Ukraine
The impact of the arrests is unknown, as Clop's ransomware leak site remains online after the arrests. The scale of the gang's current operation is also unknown.
By Alexander Culafi • June 16, 2021 -
Brand Experience Team/TechTarget
Repeat ransomware attacks hit 80% of victims who paid ransoms
New research from Cybereason offers troubling findings for organizations that pay ransoms, from repeat attacks to corrupted data and faulty decryption tools.
By Arielle Waldman • June 16, 2021 -
Brand Experience Team/TechTarget
Apple issues patches for two more WebKit zero-days
Apple said both WebKit zero-days, which affect older iOS devices, have reportedly been exploited in the wild, but further details about the threat activity are unknown.
By Alexander Culafi • June 15, 2021 -
Brand Experience Team/TechTarget
Accellion breach raises notification concerns
Victims of the breach continue to emerge, and one customer said it could have acted sooner, but a critical alert about a zero-day never left Accellion's email system.
By Arielle Waldman • June 14, 2021 -
Brand Experience Team/TechTarget
Slilpp marketplace goes dark following government takedown
Slilpp, a massive dark web emporium for buying and selling stolen credentials, has been pulled offline by an international law enforcement takedown.
By Shaun Nichols • June 11, 2021 -
Brand Experience Team/TechTarget
Securolytics COO charged in Georgia hospital cyber attack
Details on the cyber attack are scarce, but according to the indictment, Vikas Singla allegedly attempted to steal data and disrupt the hospital's phone system.
By Alexander Culafi • June 11, 2021 -
Brand Experience Team/TechTarget
Cisco Talos: Exchange Server flaws accounted for 35% of attacks
More than one third of incidents recorded by Cisco Talos in the past three months were related to four Microsoft Exchange Server zero-days first revealed in March.
By Shaun Nichols • June 11, 2021 -
Brand Experience Team/TechTarget
JBS USA paid $11M ransom to REvil hackers
Last week JBS USA said the ransomware attack was resolved and all facilities were fully operational, but now the company confirmed it paid a huge ransom.
By Arielle Waldman • June 10, 2021 -
Brand Experience Team/TechTarget
FBI used encrypted Anom app in international crime bust
The FBI secretly ran an encrypted chat network that included 12,000 devices and was widely used by criminal organizations across the globe for various illegal dealings.
By Shaun Nichols • June 8, 2021 -
Brand Experience Team/TechTarget
FBI seized Colonial Pipeline ransom using private key
After Colonial Pipeline paid a $4.4 million ransom demand in last month's attack, the DOJ announced the majority of the funds have been retrieved by the FBI.
By Arielle Waldman • June 8, 2021 -
Brand Experience Team/TechTarget
DOJ charges alleged Trickbot developer
Several of the 19 charges brought against the alleged Trickbot Group developer Alla Witte include bank fraud and aggravated identity theft.
By Alexander Culafi • June 7, 2021 -
Brand Experience Team/TechTarget
distributed denial-of-service (DDoS) attack
A distributed denial-of-service (DDoS) attack is one in which multiple compromised computer systems attack a target, such as a server, website or other network resource, and cause a denial of service for users of the targeted resource.
By Ben Lutkevich , Kevin Beaver • June 3, 2021 -
Brand Experience Team/TechTarget
ExaGrid revealed as latest Conti ransomware casualty
The data backup vendor appears to have paid a $2.6 million ransom after Conti threat actors breached its corporate network and stole internal documents.
By Shaun Nichols • June 2, 2021 -
Brand Experience Team/TechTarget
DHS opens valve on new pipeline security requirements
The U.S. government has put forward a trio of new cybersecurity requirements for companies that operate oil and gas pipelines, including incident reporting and risk assessment.
By Shaun Nichols • May 27, 2021 -
Brand Experience Team/TechTarget
Opinion
3 steps to zero-day threat protection
Don't let a zero-day threat bring down your networks. Follow these three steps to prepare for the unknown and minimize potential damage.
By Rohit Dhamankar • May 27, 2021 -
Brand Experience Team/TechTarget
Rowhammer reach extended for new attack method
Google researchers discovered a bit-flipping hardware trick can now be carried out across extra rows of transistors, circumventing protections against the attack technique.
By Shaun Nichols • May 26, 2021 -
Brand Experience Team/TechTarget
US agencies lack supply chain best practices post-SolarWinds
Vijay D'Souza, the GAO's director of IT and cybersecurity, said during a joint hearing that 'none of the agencies have fully implemented our recommendations.'
By Alexander Culafi • May 26, 2021 -
Brand Experience Team/TechTarget
Chaos in Maricopa County: The election audit explained
The controversy about an election audit of Maricopa County, Ariz., involves accusations of deleted databases, bamboo fibers and potentially ruined voting machines.
By Alexander Culafi • May 25, 2021 -
Brand Experience Team/TechTarget
Conti ransomware spree draws FBI attention
Hospitals and emergency service networks in the U.S. are at heightened risk from the new ransomware operation that disrupted Ireland's healthcare system in recent weeks.
By Shaun Nichols • May 24, 2021 -
Brand Experience Team/TechTarget
Stale sessions, ML poisoning among 2021’s top security threats
An all-star security panel at RSA Conference discusses the biggest issues facing companies today and what it thinks will emerge as the top threats in the coming months.
By Shaun Nichols • May 21, 2021 -
Brand Experience Team/TechTarget
U.S. officials discuss 2020 election security, misinformation
During an RSA Conference 2021 panel, the CISO for Maricopa County, Ariz., said misinformation posed a bigger challenge for election officials than actual cyberattacks.
By Alexander Culafi • May 20, 2021 -
Brand Experience Team/TechTarget
Infosec experts: Threat landscape is worst in 60 years
Between an increasing sophistication seen in nation-state groups and a rise in ransomware that's affecting everyone, the threat landscape may be reaching a historic peak.
By Arielle Waldman • May 20, 2021 -
Brand Experience Team/TechTarget
CrowdStrike breaks down ‘Golden SAML’ attack
The nightmare scenario, demonstrated at RSA Conference 2021, was used by threat actors in the SolarWinds breach and gave them control over both cloud and on-premises systems.
By Shaun Nichols • May 20, 2021
Previous
