Threats & Vulnerabilities: Page


  • The techtarget logo in teal next to the text reading techtarget set against a dark-blue background
    Image attribution tooltip
    Brand Experience Team/TechTarget
    Image attribution tooltip

    Trickbot takedown: Will it make a dent in ransomware attacks?

    A court order allowed Microsoft and several partners to take down the Trickbot botnet, which is commonly used to deploy ransomware, but it's unclear how long the impact will last.

    By Arielle Waldman • Oct. 13, 2020
  • The techtarget logo in teal next to the text reading techtarget set against a dark-blue background
    Image attribution tooltip
    Brand Experience Team/TechTarget
    Image attribution tooltip

    Hackers exploit Netlogon flaw to attack government networks

    CISA issued an alert stating those government networks that were targeted by the APT were close to election systems and the activity may pose some risk to those systems.

    By Arielle Waldman • Oct. 12, 2020
  • The techtarget logo in teal next to the text reading techtarget set against a dark-blue background
    Image attribution tooltip
    Brand Experience Team/TechTarget
    Image attribution tooltip

    Surge in ransomware attacks threatens student data

    Ransomware attacks are not the only threats facing K-12 schools during the COVID-19 pandemic. Cybercriminals are stealing and exposing students' personal data as well.

    By Arielle Waldman • Oct. 5, 2020
  • The techtarget logo in teal next to the text reading techtarget set against a dark-blue background
    Image attribution tooltip
    Brand Experience Team/TechTarget
    Image attribution tooltip

    Potential ransomware-related death still under investigation

    German authorities say they are still investigating the death of a patient in connection with a ransomware attack on Düsseldorf University Hospital in Germany last month.

    By Alexander Culafi • Oct. 1, 2020
  • The techtarget logo in teal next to the text reading techtarget set against a dark-blue background
    Image attribution tooltip
    Brand Experience Team/TechTarget
    Image attribution tooltip
    Opinion

    3 common election security vulnerabilities pros should know

    Election security remains top of mind for many right now, with Nabil Hannan discussing vulnerabilities like remote breaches, new attack surfaces and poor current controls.

    By Nabil Hannan • Oct. 1, 2020
  • The techtarget logo in teal next to the text reading techtarget set against a dark-blue background
    Image attribution tooltip
    Brand Experience Team/TechTarget
    Image attribution tooltip

    IBM: Ransomware attacks surged in Q2, ransom demands rising

    IBM Security examined several concerning ransomware for this year, as well as an exponential increase in ransom demands and massive spike in attacks during the spring.

    By Arielle Waldman • Sept. 28, 2020
  • The techtarget logo in teal next to the text reading techtarget set against a dark-blue background
    Image attribution tooltip
    Brand Experience Team/TechTarget
    Image attribution tooltip

    Microsoft detects Netlogon vulnerability exploitation in the wild

    While Microsoft released a patch last month for the Netlogon flaw, the company said it detected threat actors using exploits for the critical vulnerability.

    By Arielle Waldman • Sept. 24, 2020
  • The techtarget logo in teal next to the text reading techtarget set against a dark-blue background
    Image attribution tooltip
    Brand Experience Team/TechTarget
    Image attribution tooltip

    FBI: Disinformation attacks on election results ‘likely’

    Foreign threat actors and cybercriminals are "likely" to spread disinformation around 2020 election results through social media and also alter election-related websites.

    By Alexander Culafi • Sept. 23, 2020
  • The techtarget logo in teal next to the text reading techtarget set against a dark-blue background
    Image attribution tooltip
    Brand Experience Team/TechTarget
    Image attribution tooltip

    Cyber attacks on schools increasing amid remote learning shift

    The pandemic forced schools to make a quick transition to remote learning with little resources and weak security postures, and threat actors have increased their attacks.

    By Arielle Waldman • Sept. 21, 2020
  • The techtarget logo in teal next to the text reading techtarget set against a dark-blue background
    Image attribution tooltip
    Brand Experience Team/TechTarget
    Image attribution tooltip

    Maze ransomware gang uses VMs to evade detection

    A Sophos investigation into a Maze ransomware attack revealed that threat actors borrowed an attack technique pioneered by Ragnar Locker operators earlier this year.

    By Arielle Waldman • Sept. 17, 2020
  • The techtarget logo in teal next to the text reading techtarget set against a dark-blue background
    Image attribution tooltip
    Brand Experience Team/TechTarget
    Image attribution tooltip
    Opinion

    How to protect companies from business email compromise

    Research shows that business email compromise attacks continue to proliferate as threat actors continue to see success. Here are a few ways to protect your company.

    By Justin Brecese • Sept. 15, 2020
  • The techtarget logo in teal next to the text reading techtarget set against a dark-blue background
    Image attribution tooltip
    Brand Experience Team/TechTarget
    Image attribution tooltip

    Disinformation, mail-in ballots top election security concerns

    While there have been no major cyberattacks this election season, threat actors are waging disinformation campaigns around hot-button issues like mail-in ballots.

    By Arielle Waldman • Sept. 10, 2020
  • The techtarget logo in teal next to the text reading techtarget set against a dark-blue background
    Image attribution tooltip
    Brand Experience Team/TechTarget
    Image attribution tooltip

    Intel patches critical flaw in Active Management Technology

    Intel's Patch Tuesday featured four security advisories, including a critical flaw in Active Management Technology that could allow an attacker privilege escalation.

    By Arielle Waldman • Sept. 9, 2020
  • The techtarget logo in teal next to the text reading techtarget set against a dark-blue background
    Image attribution tooltip
    Brand Experience Team/TechTarget
    Image attribution tooltip

    CISA and FBI say there have been no hacks on voter databases

    After a false Russian news report circulated on the internet, CISA and the FBI released a joint statement that denied any hacks to election security.

    By Arielle Waldman • Sept. 2, 2020
  • The techtarget logo in teal next to the text reading techtarget set against a dark-blue background
    Image attribution tooltip
    Brand Experience Team/TechTarget
    Image attribution tooltip

    Big ransomware attacks overshadowing other alarming trends

    Large ransomware attacks on major enterprises have dominated the news, but security experts say there are other alarming trends.

    By Alexander Culafi • Sept. 1, 2020
  • The techtarget logo in teal next to the text reading techtarget set against a dark-blue background
    Image attribution tooltip
    Brand Experience Team/TechTarget
    Image attribution tooltip

    Cisco issues alert for zero-day vulnerability under attack

    Cisco discovered attempted exploitation of a high-severity vulnerability found in the IOS XR software used in some of its networking equipment.

    By Arielle Waldman • Aug. 31, 2020
  • The techtarget logo in teal next to the text reading techtarget set against a dark-blue background
    Image attribution tooltip
    Brand Experience Team/TechTarget
    Image attribution tooltip

    North Korea’s ‘BeagleBoyz’ target banks with ATM cash-out attacks

    The U.S. Government issued a joint alert for an ATM cash-out scheme run by a newly identified North Korean nation-state hacking group known as 'BeagleBoyz.'

    By Alexander Culafi • Aug. 27, 2020
  • The techtarget logo in teal next to the text reading techtarget set against a dark-blue background
    Image attribution tooltip
    Brand Experience Team/TechTarget
    Image attribution tooltip

    Maze ransomware ‘cartel’ expands with new members

    Two more ransomware groups have apparently joined the Maze 'cartel' in an effort to expose victims' data on leak sites and shame them into paying expensive ransoms.

    By Arielle Waldman • Aug. 27, 2020
  • The techtarget logo in teal next to the text reading techtarget set against a dark-blue background
    Image attribution tooltip
    Brand Experience Team/TechTarget
    Image attribution tooltip

    ‘Meow’ attacks top 25,000 exposed databases, services

    One month after the notorious 'meow' attacks were first detected, the threat to misconfigured databases exposed on the internet shows little sign of slowing down.

    By Arielle Waldman • Aug. 25, 2020
  • The techtarget logo in teal next to the text reading techtarget set against a dark-blue background
    Image attribution tooltip
    Brand Experience Team/TechTarget
    Image attribution tooltip

    FBI and CISA issue vishing campaign warning

    The FBI and CISA have issued a joint advisory related to a vishing campaign that began in mid-July, with numerous attacks that gained access to corporate VPN credentials.

    By Alexander Culafi • Aug. 24, 2020
  • The techtarget logo in teal next to the text reading techtarget set against a dark-blue background
    Image attribution tooltip
    Brand Experience Team/TechTarget
    Image attribution tooltip

    Claroty: 70% of ICS vulnerabilities are remotely exploitable

    Out of 365 ICS vulnerabilities that were disclosed by the National Vulnerability Database in the first half of 2020, Claroty found more than 70% can be remotely exploited.

    By Alexander Culafi • Aug. 21, 2020
  • The techtarget logo in teal next to the text reading techtarget set against a dark-blue background
    Image attribution tooltip
    Brand Experience Team/TechTarget
    Image attribution tooltip

    Apache Struts vulnerabilities allow remote code execution, DoS

    The Apache Software Foundation issued security advisories last week for two Apache Struts vulnerabilities that were originally patched but not fully disclosed last fall.

    By Alexander Culafi • Aug. 18, 2020
  • The techtarget logo in teal next to the text reading techtarget set against a dark-blue background
    Image attribution tooltip
    Brand Experience Team/TechTarget
    Image attribution tooltip

    Kaspersky reveals 2 Windows zero-days from failed attack

    Kaspersky prevented an attack against a South Korean company back in May that used two zero-day vulnerabilities. One, arguably the more dangerous, focused on Internet Explorer.

    By Alexander Culafi • Aug. 12, 2020
  • The techtarget logo in teal next to the text reading techtarget set against a dark-blue background
    Image attribution tooltip
    Brand Experience Team/TechTarget
    Image attribution tooltip
    Opinion

    What cybersecurity teams can learn from COVID-19

    Nabil Hannan examines key similarities between medical and computer viruses that cybersecurity teams can use to keep businesses protected effectively.

    By Nabil Hannan • Aug. 12, 2020
  • The techtarget logo in teal next to the text reading techtarget set against a dark-blue background
    Image attribution tooltip
    Brand Experience Team/TechTarget
    Image attribution tooltip

    10 years after Stuxnet, new zero-days discovered

    A decade after Stuxnet, SafeBreach Labs researchers discovered new zero-day vulnerabilities connected to the threat, which they unveiled at Black Hat USA 2020.

    By Alexander Culafi • Aug. 7, 2020