Threats & Vulnerabilities: Page

SonicWall confirms zero-day vulnerability on SMA 100 series

After testing NCC Group's findings, SonicWall 'confirmed their submission as a critical zero-day in the SMA 100 series 10.x code, and are tracking it as SNWLID-2021-0001.'

By Alexander Culafi • Feb. 2, 2021

The dark web in 2021: Should enterprises be worried?

SearchSecurity spoke with multiple experts to find out how the dark web has changed, what the security risks are for enterprises and the value of dark web monitoring services.

By Alexander Culafi • Feb. 1, 2021

DOJ charges suspect in NetWalker ransomware attacks

The Department of Justice launched a coordinated effort to disrupt the notorious ransomware operation, which has infected healthcare organizations during the COVID-19 pandemic.

By Arielle Waldman • Jan. 28, 2021

Emotet taken down in global law enforcement operation

Ukraine's National Police said two citizens of Ukraine face up to 12 years in prison for their role in maintaining and operating Emotet, and other suspects have been identified.

By Alexander Culafi • Jan. 27, 2021

Mimecast certificate compromised by SolarWinds hackers

Mimecast conducted an investigation after being alerted by Microsoft that a certificate for Microsoft 365 Exchange Web Services authentication was stolen by a sophisticated actor.

By Arielle Waldman • Jan. 26, 2021

SonicWall breached through ‘probable’ zero-day vulnerabilities

SonicWall's internal systems were breached, and the company is investigating its Secure Mobile Access (SMA) 100 series, a remote access product for SMBs, as a possible vector.

By Alexander Culafi • Jan. 25, 2021

4 ways to minimize the risk of IT supply chain attacks

Mark Whitehead breaks down the importance of taking a zero-trust cybersecurity approach when it comes to protecting networks and data accessible by third-party partners.

By Mark Whitehead • Jan. 25, 2021

Standardize cybersecurity terms to get everyone correct service

Some cybersecurity terms can refer to multiple service offerings, which can be confusing for companies looking to implement them as well as the companies providing them.

By Nabil Hannan • Jan. 22, 2021

FireEye releases new tool to fight SolarWinds hackers

The new tool, dubbed Azure AD Investigator, will help audit Microsoft 365 environments for techniques used by the nation-state actors behind the SolarWinds supply chain attack.

By Arielle Waldman • Jan. 20, 2021

Malwarebytes breached by SolarWinds hackers

Malwarebytes, which is not a SolarWinds customer, confirmed that nation-state actors used an entirely different vector to breach the antimalware vendor and access internal emails.

By Arielle Waldman • Jan. 19, 2021

FBI warns against vishing attacks targeting enterprises

Though the FBI vishing warning references attacks that began in December 2019, the alert is reminiscent of the Twitter social engineering attacks that took place last July.

By Alexander Culafi • Jan. 19, 2021

Tenable: Vulnerability disclosures skyrocketed over last 5 years

New research from Tenable shows a dramatic increase in vulnerability disclosures since 2015, as well as concerning data about data breaches, ransomware threats and unpatched bugs.

By Arielle Waldman • Jan. 14, 2021

Capitol building breach poses cybersecurity risks

While security experts are divided on the level of risk, they agree there is a potential for threats after rioters stormed the Capitol building and ransacked offices.

By Arielle Waldman • Jan. 12, 2021

SolarWinds confirms supply chain attack began in 2019

SolarWinds and CrowdStrike published updates Monday that added new information for the timeline of the supply chain attack and how threat actors first gained access.

By Alexander Culafi • Jan. 12, 2021

The SolarWinds attacks: What we know so far

The SolarWinds attacks have left a massive impact on security, tech and the world at large, and events are still unfolding nearly a month after the initial disclosure.

By Alexander Culafi • Jan. 6, 2021

10 of the biggest cyber attacks of 2020

Here is a list of 10 of the largest cyber attacks of a pandemic-dominated 2020, including several devastating ransomware incidents and a massive supply chain attack.

By Arielle Waldman • Jan. 5, 2021

Ransomware ‘businesses’: Does acting legitimate pay off?

Ransomware gangs such as Maze have portrayed themselves almost like penetration testing firms and referred to victims as 'clients.' What's behind this approach?

By Alexander Culafi • Jan. 4, 2021

deception technology

Deception technology is a class of security tools and techniques designed to prevent an attacker who has already entered the network from doing damage. The technology uses decoys to misdirect the attacker and delay or prevent him from going deeper into the network and reaching his intended target.

By Carolyn Crandall • Jan. 4, 2021

What is bloatware? How to identify and remove it

Unwanted pre-installed software -- also known as bloatware -- has long posed security threats for computers and other devices. Here are strategies for how to detect bloatware and uninstall the potential threat.

By Nick Lewis, Ben Cole • Dec. 29, 2020

Security measures critical for COVID-19 vaccine distribution

The COVID-19 vaccine supply chain is already under attack, which comes as no surprise to experts. The biggest potential threats, however, are still to come.

By Makenzie Holland, Jim O'Donnell • Dec. 23, 2020

SolarWinds backdoor infected tech giants, impact unclear

Reports that technology giants were also affected by the SolarWinds backdoor malware have been confirmed by several major vendors, though there's no evidence they were breached.

By Arielle Waldman • Dec. 21, 2020

CISA: SolarWinds backdoor attacks are ‘ongoing’

A joint statement from the FBI, CISA and Office of the Director of National Intelligence says the SolarWinds backdoor attacks are 'ongoing' and have comprised federal agencies.

By Arielle Waldman • Dec. 17, 2020

SolarWinds struggles with response to supply chain attack

Security researchers discovered the Orion DLL component containing the backdoor used was still present in updates on SolarWinds' website as recently as Monday night.

By Alexander Culafi • Dec. 16, 2020

Technology a double-edged sword for U.S. election security

Technologies were weaponized to undermine the 2020 U.S. presidential election, but IT systems have also helped to identify fraud and verify results in a hotly contested election.

By Bridget Botelho • Dec. 14, 2020

FBI, CISA warn of growing ransomware attacks on K-12 schools

The FBI and the Cybersecurity and Infrastructure Security Agency warned that cyber attacks targeting K-12 schools are expected to continue through the 2020 - 2021 school year.

By Alexander Culafi • Dec. 11, 2020