Threats & Vulnerabilities: Page
-
Brand Experience Team/TechTarget
DOJ creates ransomware task force to combat digital extortion
An internal memo from the DOJ said the task force will 'bring the full authorities and resources of the Department' in order to confront the growing threat of ransomware.
By Alexander Culafi • April 22, 2021 -
Brand Experience Team/TechTarget
Zero-day flaw in Pulse Secure VPN exploited in attacks
A remote code execution vulnerability found in Pulse Secure VPN appliances has been exploited in attacks affecting government, defense and financial organizations.
By Arielle Waldman • April 21, 2021 -
Brand Experience Team/TechTarget
Hackers exploit 3 SonicWall zero-day vulnerabilities
SonicWall patched the zero-day vulnerabilities earlier this month, but the security vendor didn't disclose they were being exploited until Tuesday.
By Alexander Culafi • April 21, 2021 -
Brand Experience Team/TechTarget
The wide web of nation-state hackers attacking the U.S.
Cybersecurity experts weigh in on what it means to be a nation-state hacker, as well as the activities and motivations of the 'big four' countries attacking the U.S.
By Alexander Culafi • April 20, 2021 -
Brand Experience Team/TechTarget
Applus inspection systems still down following malware attack
Applus Technologies said it stopped a malware attack two weeks ago, but systems are still down as eight states are forced to extend vehicle inspection dates.
By Arielle Waldman • April 15, 2021 -
Brand Experience Team/TechTarget
Nation-state hacker indictments: Do they help or hinder?
While there are some benefits to filing criminal charges against nation-state actors, infosec experts say thus far, indictments haven't reduced cyber attacks.
By Arielle Waldman • April 15, 2021 -
Brand Experience Team/TechTarget
FBI removes web shells from infected Exchange servers
The DOJ announced the FBI had successfully removed hundreds of web shells from computers impacted by ProxyLogon and related Exchange Server vulnerabilities.
By Alexander Culafi • April 14, 2021 -
Brand Experience Team/TechTarget
NSA finds new Exchange Server vulnerabilities
Microsoft said it has not seen the new Exchange Server vulnerabilities being used in attacks against customers, but customers are still advised to patch immediately.
By Alexander Culafi • April 13, 2021 -
Brand Experience Team/TechTarget
McAfee: PowerShell threats grew 208% in Q4 2020
McAfee's latest threat report showed a sharp increase in PowerShell threats between Q3 and Q4 2020, in part due to malware known as Donoff and a rise in ransomware detections.
By Alexander Culafi • April 13, 2021 -
Brand Experience Team/TechTarget
Cring ransomware attacking vulnerable Fortigate VPNs
A vulnerability impacting Fortinet's Fortigate VPN, first disclosed and patched in 2019, is being exploited by Cring ransomware operators to extort bitcoin from enterprises.
By Alexander Culafi • April 8, 2021 -
Brand Experience Team/TechTarget
Cisco: Threat actors abusing Slack, Discord to hide malware
The threat intelligence vendor released a new report on how threat actors are increasingly abusing popular collaboration applications like Slack and Discord during the pandemic.
By Arielle Waldman • April 7, 2021 -
Brand Experience Team/TechTarget
CISA: APTs exploiting Fortinet FortiOS vulnerabilities
Three Fortinet FortiOS vulnerabilities that have been fully patched since last summer are being exploited by advanced persistent threat actors, according to the FBI and CISA.
By Alexander Culafi • April 5, 2021 -
Brand Experience Team/TechTarget
How to land a job in cybersecurity
Find out if you're a good fit for a career in cybersecurity, the kind of training required, how to start building IT security skills and the types of jobs available.
By Josh Johnson • April 5, 2021 -
Brand Experience Team/TechTarget
Man indicted in Kansas water facility breach
While the attempted tampering of a Kansas water facility occurred more than two years ago, the Justice Department this week indicted a 22-year-old former employee.
By Arielle Waldman • April 1, 2021 -
Brand Experience Team/TechTarget
CISA: U.S. agencies must scan for Exchange Server attacks
CISA has not said whether any federal agencies have been hit by Exchange Server attacks, but the directive requires them to use Microsoft's detection tools to identify threats.
By Alexander Culafi • April 1, 2021 -
Brand Experience Team/TechTarget
DHS: Ransomware poses a national security threat
Ransomware is just one threat DHS Secretary Alejandro Mayorkas discusses during an RSA Conference webcast on the cybersecurity challenges facing the U.S.
By Arielle Waldman • April 1, 2021 -
Brand Experience Team/TechTarget
CompTIA Security+
CompTIA Security+ is a certification that demonstrates a person's competency with core security practices and functions that are carried out in IT security roles.
By Alexander Gillis • March 31, 2021 -
Brand Experience Team/TechTarget
Mysterious Hades ransomware striking ‘big game’ enterprises
CrowdStrike reported Hades is tied to Evil Corp, but Awake Labs discovered a possible connection to Hafnium, a Chinese nation-state group behind initial Exchange Server attacks.
By Alexander Culafi • March 30, 2021 -
Brand Experience Team/TechTarget
Nearly 100,000 web shells detected on Exchange servers
Although Microsoft reported a decrease in the number of vulnerable Exchange servers, new research shows a large amount of malicious web shells hiding inside networks.
By Arielle Waldman • March 24, 2021 -
Brand Experience Team/TechTarget
‘Black Kingdom’ ransomware impacting Exchange servers
Both ransomware and scareware variants of Black Kingdom have been reported in attacks against vulnerable Exchange servers, but the reason for this remains unclear.
By Alexander Culafi • March 23, 2021 -
Brand Experience Team/TechTarget
Acer hit by apparent attack from REvil ransomware group
Acer told SearchSecurity in a statement that it has 'reported recent abnormal situations observed to the relevant law enforcement.' However, it did not confirm a ransomware attack.
By Alexander Culafi • March 19, 2021 -
Brand Experience Team/TechTarget
FBI IC3 report’s ransomware numbers are low, experts say
The FBI's Internet Crime Complaint Center reported a massive increase in financial losses from 2020 ransomware attacks, but infosec experts say the problem is worse than statistics say.
By Alexander Culafi • March 18, 2021 -
Brand Experience Team/TechTarget
SolarWinds hackers stole Mimecast source code
The investigation into a stolen Mimecast-issued digital certificate is now complete, and the vendor said the initial intrusion was Sunburst malware in the SolarWinds Orion platform.
By Arielle Waldman • March 17, 2021 -
Brand Experience Team/TechTarget
Microsoft Exchange Server attacks news center
RiskIQ: 69,548 Microsoft Exchange servers still vulnerable
Security intelligence vendor RiskIQ found that 69,548 servers remained unpatched as of Sunday and are vulnerable to attacks, with nearly 17,000 servers located in the U.S.
By Alexander Culafi • March 16, 2021 -
Brand Experience Team/TechTarget
Microsoft Exchange Server attacks news center
Timeline of Microsoft Exchange Server attacks raises questions
Multiple security vendors reported that exploitation of the Microsoft Exchange Server zero-days began well before their disclosure, but researchers are at a loss to explain why.
By Arielle Waldman • March 16, 2021
Previous
