Threats & Vulnerabilities: Page
-
Brand Experience Team/TechTarget
Forescout reports 33 new TCP/IP vulnerabilities
The lack of consistent updates (and the open source nature of the stacks) make the Amnesia:33 vulnerabilities difficult to fix as well as make it difficult to comprehend the full impact.
By Alexander Culafi • Dec. 8, 2020 -
Brand Experience Team/TechTarget
New Microsoft Teams RCE vulnerability also wormable
In his GitHub post, researcher Oskars Vegeris discussed Microsoft classifying the vulnerability as 'Important' rather than 'Critical,' despite it being exploitable via RCE.
By Alexander Culafi • Dec. 8, 2020 -
Brand Experience Team/TechTarget
Salesforce advised users to skip Chrome browser updates
Salesforce recommended users dealing with mixed content issues to skip Chrome upgrades or roll back to older versions of the browser, but the vendor later removed those steps.
By Arielle Waldman • Dec. 8, 2020 -
Brand Experience Team/TechTarget
Russian state-sponsored hackers exploit VMware vulnerability
The NSA issued a cybersecurity advisory warning government agencies to mitigate as soon as possible, as the vulnerability was disclosed and patched last week.
By Arielle Waldman • Dec. 7, 2020 -
Brand Experience Team/TechTarget
Updated Trickbot malware threatens firmware security
Despite recent takedown efforts, the operators behind the malicious botnet are back with a new module called 'TrickBoot' that detects UEFI/BIOS firmware vulnerabilities.
By Arielle Waldman • Dec. 3, 2020 -
Brand Experience Team/TechTarget
Ransomware attack shuts down Baltimore County schools
Ransomware incapacitated Baltimore County Public Schools' network just before Thanksgiving, but the school system said students' Chromebooks and Google accounts were not impacted.
By Arielle Waldman • Dec. 1, 2020 -
Brand Experience Team/TechTarget
Online education vendor K12 hit with ransomware, pays ransom
A spokesperson for K12 told SearchSecurity that based on the current status of the investigation, the attack did not affect student devices or school networks.
By Alexander Culafi • Dec. 1, 2020 -
Brand Experience Team/TechTarget
7 Reasons Identity and Access Management Is Important
Identity and access management tools and processes can provide organizations with numerous benefits: such as better data security, regulatory compliance and resource access.
By Linda Rosencrance • Nov. 23, 2020 -
Brand Experience Team/TechTarget
Expert Advice
What are the biggest hardware security threats?
Hardware security threats -- and strategies to overcome them -- are evolving as enterprises increasingly install autonomous capabilities for smart building and IoT projects.
By Andrew Froehlich • Nov. 20, 2020 -
Brand Experience Team/TechTarget
White House questions election security; experts do not
A number of infosec experts, election officials and government agencies say Election Day was free from hacking and cyber attacks, but the White House disagrees.
By Arielle Waldman • Nov. 19, 2020 -
Brand Experience Team/TechTarget
Sophos: Ransomware ‘heavyweights’ demand sky-high payments
Sophos principal research scientist Chet Wisniewski explains the presence of 'weight classes' in ransomware and offers his thoughts on its future.
By Alexander Culafi • Nov. 18, 2020 -
Brand Experience Team/TechTarget
CrowdStrike: Ransomware hit 56% of organizations in last year
A new survey from CrowdStrike revealed more than half of 2,200 respondents' organizations were hit with a ransomware attack at least once in the past 12 months.
By Arielle Waldman • Nov. 17, 2020 -
Brand Experience Team/TechTarget
Expert Advice // Manage risks, reduce threats with a cloud security framework
How to use the Mitre ATT&CK framework for cloud security
Learn how to use the Mitre ATT&CK security framework to keep your enterprise cloud environment -- whether AWS, GCP, Azure, Azure AD or Microsoft 365 -- secure.
By Dave Shackleford • Nov. 13, 2020 -
Brand Experience Team/TechTarget
25,000 criminal reports: Vastaamo breach sets new precedent
The recent data breach at the Vastaamo Psychotherapy Centre in Finland shows threat actors are willing to threaten and extort patients directly, setting a dangerous new precedent.
By Arielle Waldman • Nov. 12, 2020 -
Brand Experience Team/TechTarget
Life after Maze: Is Egregor ransomware next?
Cybersecurity experts have noted similarities between newly discovered Egregor ransomware and the now-defunct Maze, but it's unclear whether the same threat actors are involved.
By Alexander Culafi • Nov. 12, 2020 -
Brand Experience Team/TechTarget
CISA: No election hacking, but plenty of misinformation
Election Day in the U.S. occurred with no evidence of cyber attacks or voting machine hacks, but CISA has its hands full with disinformation and conspiracy theories.
By Arielle Waldman, Alexander Culafi • Nov. 9, 2020 -
Brand Experience Team/TechTarget
SaltStack discloses critical vulnerabilities, urges patching
The SaltStack vulnerabilities, disclosed Tuesday, allow remote attackers to execute arbitrary code on affected installations of the popular open source software.
By Arielle Waldman • Nov. 4, 2020 -
Brand Experience Team/TechTarget
Maze gang shuts down its ransomware operation
Maze ransomware has shut down, according to an announcement it posted Sunday, although some evidence suggests that Maze operators have resumed attacks under a different name.
By Alexander Culafi • Nov. 2, 2020 -
Brand Experience Team/TechTarget
FBI, CISA warn of impending ransomware attacks on hospitals
Trickbot and Ryuk ransomware actors are targeting hospitals and other healthcare providers, according to a joint cybersecurity advisory from the CISA and the FBI.
By Alexander Culafi • Oct. 29, 2020 -
Brand Experience Team/TechTarget
‘Lives at stake’: How ransomware impacts hospitals
Some ransomware gangs pledged to not target medical facilities during the COVID-19 pandemic, but hospitals are still getting hit. And the attacks affect more than just IT systems.
By Alexander Culafi • Oct. 28, 2020 -
Brand Experience Team/TechTarget
Iranian hackers pose as far-right group to threaten U.S. voters
The FBI said Russia and Iran have obtained voter information, and Iranian hackers have also been sending threatening emails to voters that appeared to be from a far-right group.
By Alexander Culafi • Oct. 22, 2020 -
Brand Experience Team/TechTarget
Microsoft: 94% of Trickbot’s infrastructure disabled
In a new blog post, Microsoft said its legal takedown last week, which sought to decrease Trickbot activity, disabled the vast majority of the botnet's servers.
By Arielle Waldman • Oct. 21, 2020 -
Brand Experience Team/TechTarget
NSA issues advisory against Chinese state-sponsored hackers
Among the 25 vulnerabilities listed in the NSA advisory, numerous were critical and carried a CVSS score either at or close to 10, the highest possible.
By Alexander Culafi • Oct. 21, 2020 -
Brand Experience Team/TechTarget
Opinion
Combating disinformation campaigns ahead of 2020 election
As the 2020 election approaches, more focus needs to be on overcoming disinformation campaigns that manipulate voters as they vote early or head to the polls on Election Day.
By Jason Yakencheck • Oct. 19, 2020 -
Brand Experience Team/TechTarget
Twitter hackers posed as IT staff, used VPN issues as a lure
A report by New York State's Department of Financial Services found that hackers breached Twitter's network by posing as IT support and obtaining credentials through vishing.
By Alexander Culafi • Oct. 16, 2020
Previous
