Threats & Vulnerabilities: Page
-
Brand Experience Team/TechTarget
SentinelOne: More supply chain attacks are coming
At RSA Conference 2021, SentinelOne threat researcher Marco Figueroa discussed the implications of the SolarWinds attacks, which he called one of the biggest hacks ever.
By Arielle Waldman • May 19, 2021 -
Brand Experience Team/TechTarget
SolarWinds CEO: Supply chain attack began in January 2019
SolarWinds CEO Sudhakar Ramakrishna clarified earlier remarks from the company and said the massive supply chain attack was not the result of an intern's mistake.
By Alexander Culafi • May 19, 2021 -
Brand Experience Team/TechTarget
Sophos: 81% of attacks last year involved ransomware
The majority of incidents Sophos responded to in the last year involved ransomware. The company also found the median dwell time of attackers was 11 days.
By Alexander Culafi • May 18, 2021 -
Brand Experience Team/TechTarget
Hackers turn Comcast voice remotes into eavesdropping tool
Guardicore researchers at RSA Conference 2021 manipulated the Xfinity XR11 voice controller to covertly record household conversations, raising concerns about IoT devices.
By Shaun Nichols • May 17, 2021 -
Brand Experience Team/TechTarget
‘Scheme flooding’ bug threatens to sink user privacy
Researchers have uncovered a blind spot in web security that opens the door for tracking across multiple browsers and thwarts common privacy protections like incognito and VPN.
By Shaun Nichols • May 14, 2021 -
Brand Experience Team/TechTarget
Verizon DBIR shows sharp increase in ransomware attacks
According to Verizon's latest Data Breach Investigations Report, 60% of ransomware cases involved either direct installation or installation via desktop sharing software.
By Alexander Culafi • May 13, 2021 -
Brand Experience Team/TechTarget
Hacker makes short work of Apple AirTag jailbreak
A security researcher discovered a jailbreaking method for Apple's new mobile locating tracking devices, which were introduced just last month.
By Shaun Nichols • May 12, 2021 -
Brand Experience Team/TechTarget
Senate hearing raises questions about SolarWinds backdoors
U.S. Department of Commerce CISO Ryan Higgins said in a Senate committee hearing Tuesday that his department was one of first agencies to detect the systemic compromise.
By Alexander Culafi • May 12, 2021 -
Brand Experience Team/TechTarget
DarkSide: The ransomware gang that took down a pipeline
DarkSide may be best known for the Colonial Pipeline ransomware attack, but the gang has hit dozens of organizations since last summer, presenting itself as a Robin Hood-type group.
By Alexander Culafi • May 12, 2021 -
Brand Experience Team/TechTarget
industrial espionage
Industrial espionage is the covert, and sometimes illegal, practice of investigating competitors to gain a business advantage.
By Ivy Wigmore, Mary Shacklett • May 11, 2021 -
Brand Experience Team/TechTarget
Colonial Pipeline runs dry following ransomware attack
A vital U.S. oil supply was shut down to prevent a ransomware infection from spreading from corporate IT systems to more crucial operational technology systems.
By Shaun Nichols • May 10, 2021 -
Brand Experience Team/TechTarget
‘Bulletproof’ hosts catch RICO charges for aiding cybercriminals
Four men pleaded guilty to RICO conspiracy charges for operating a bulletproof hosting service that provided infrastructure to cybercriminals' operations.
By Shaun Nichols • May 7, 2021 -
Brand Experience Team/TechTarget
kill switch
A kill switch in an IT context is a mechanism used to shut down or disable a device or program.
By TechTarget Contributor • May 7, 2021 -
Brand Experience Team/TechTarget
‘BadAlloc’ vulnerabilities spell trouble for IoT, OT devices
A week after Microsoft revealed 25 memory allocation vulnerabilities in several IoT and OT products, some devices have been patched, while others have not.
By Arielle Waldman • May 6, 2021 -
Brand Experience Team/TechTarget
US defense contractor BlueForce apparently hit by ransomware
The Conti ransomware operators demanded nearly $1 million in bitcoin during ransomware negotiations and threatened to publish the defense contractor's data on its leak site.
By Alexander Culafi • May 6, 2021 -
Brand Experience Team/TechTarget
Dell patches high-severity flaws in firmware update driver
SentinelOne discovered the flaws in Dell's firmware update driver in December. There's no evidence that hackers have exploited the 12-year-old vulnerabilities.
By Antone Gonsalves • May 6, 2021 -
Brand Experience Team/TechTarget
Twilio discloses breach caused by Codecov supply chain hack
Twilio utilizes Codecov tools including the previously compromised Bash Uploader script. It said that a "small number" of customer emails were potentially exposed.
By Alexander Culafi • May 5, 2021 -
Brand Experience Team/TechTarget
Researchers use PyInstaller to create stealth malware
Academic researchers say the application builder could be used to create undetectable attack bundles that bypass many widely used antimalware programs.
By Shaun Nichols • May 5, 2021 -
Brand Experience Team/TechTarget
Qualys finds 21 vulnerabilities in Exim mail software
Qualys, which discovered the '21Nails' vulnerabilities, said that it did not see evidence of exploitation, but many vulnerabilities are 17 years old and at risk of being exploited.
By Alexander Culafi • May 4, 2021 -
Brand Experience Team/TechTarget
Apple hurries out fixes for WebKit zero-days
Mac and iOS users are urged to patch their devices immediately for Apple WebKit flaws following reports of active exploits in the wild.
By Shaun Nichols • May 3, 2021 -
Brand Experience Team/TechTarget
Ransomware Task Force takes aim at cryptocurrencies
The Ransomware Task Force released a new report with recommendations on how to tackle the growing ransomware problem, including regulation of cryptocurrency services.
By Arielle Waldman • April 29, 2021 -
Brand Experience Team/TechTarget
SolarWinds puts national cybersecurity strategy on display
Biden imposed economic sanctions on Russia for its role in the SolarWinds cyber attack. Experts see the response as just one part of a larger national cybersecurity strategy.
By Makenzie Holland • April 29, 2021 -
Brand Experience Team/TechTarget
Remaining Emotet infections uninstalled by German police
A German federal police action led to all infections of Emotet malware being uninstalled Sunday, following an international police takeover of Emotet infrastructure in January.
By Alexander Culafi • April 26, 2021 -
Brand Experience Team/TechTarget
Hackers targeting VPN vulnerabilities in ongoing attacks
As remote work increased during the pandemic, threat actors increasingly targeted known vulnerabilities.
By Arielle Waldman • April 26, 2021 -
Brand Experience Team/TechTarget
computer cracker
A computer cracker is an outdated term used to describe someone who broke into computer systems, bypassed passwords or licenses in computer programs, or in other ways intentionally breached computer security.
By Sharon Shea , Ben Lutkevich • April 23, 2021
Previous
