Threats & Vulnerabilities: Page
-
Brand Experience Team/TechTarget
CISA chief: Ransomware could threaten election security
During a Black Hat USA 2020 session, CISA Chief Christopher Krebs said ransomware attacks on city, state and local governments are a major concern for election security.
By Arielle Waldman • Aug. 6, 2020 -
Brand Experience Team/TechTarget
Ripple20 vulnerabilities still plaguing IoT devices
Months after Ripple20 vulnerabilities were reported, things haven't gotten much better, say experts at Black Hat USA 2020. In fact, the world may never be fully rid of the flaws.
By Alexander Culafi • Aug. 6, 2020 -
Brand Experience Team/TechTarget
Matt Blaze warns of election security challenges amid COVID-19
In his Black Hat USA 2020 keynote, security researcher Matt Blaze discussed the challenges facing U.S. elections this year and what must be done to solve them.
By Rob Wright • Aug. 5, 2020 -
Brand Experience Team/TechTarget
Twitter breach raises concerns over phone phishing
The alleged mastermind behind the Twitter breach has been arrested, and the method of social engineering attack has also been revealed: phone phishing, or vishing.
By Arielle Waldman, Alexander Culafi • Aug. 4, 2020 -
Brand Experience Team/TechTarget
‘Meow’ attacks continue, thousands of databases deleted
More than one week later, the mysterious attacks on insecure databases on ElasticSearch, MongoDB and others have not only persisted but grown, with no explanation.
By Arielle Waldman • July 30, 2020 -
Brand Experience Team/TechTarget
‘BootHole’ bug puts most Linux, Windows systems in jeopardy
Hardware security vendor Eclypsium discovered a bootloader vulnerability that bypasses Secure Boot protection and affects a majority of modern Linux and Windows systems.
By Arielle Waldman • July 29, 2020 -
Brand Experience Team/TechTarget
Emotet botnet hacked, malware replaced with humorous GIFs
Malware distribution network Emotet has been hacked by a potential threat actor of unknown origin, with malware payloads now being replaced with GIFs of James Franco and others.
By Alexander Culafi • July 27, 2020 -
Brand Experience Team/TechTarget
Digital ad networks tied to malvertising threats -- again
Adsterra and Propeller Ads were implicated in past malvertising threats such the Master134 campaign. Now the two ad networks are linked to new malicious activity.
By Rob Wright • July 27, 2020 -
Brand Experience Team/TechTarget
‘Meow’ attacks wipe more than 1,000 exposed databases
A new threat has hit more than 1,000 unsecured databases on ElasticSearch, MongoDB and other platforms, destroying data and replacing files with a single word: meow.
By Arielle Waldman • July 23, 2020 -
Brand Experience Team/TechTarget
Evasive phishing campaign hid inside Google cloud services
A new report by Check Point Software Technologies revealed attackers were abusing Google Cloud Functions to hide their phishing links within public cloud services.
By Arielle Waldman • July 23, 2020 -
Brand Experience Team/TechTarget
Twitter breach caused by social engineering attack
Twitter was breached last Wednesday though a social engineering attack. Forty-five accounts were hijacked and up to eight accounts may have had their private messages stolen.
By Alexander Culafi • July 20, 2020 -
Brand Experience Team/TechTarget
‘SigRed’ alert: Experts urge action on Windows DNS vulnerability
Experts are urging organizations to take immediate action on SigRed, a 17-year-old Windows DNS server vulnerability discovered by Check Point Research and patched by Microsoft.
By Alexander Culafi • July 17, 2020 -
Brand Experience Team/TechTarget
RSA finds two-thirds of phishing attacks directed at Canada
RSA Security researchers found that nearly 70% of phishing attacks were directed at users in Canada, while the majority of attacks come from U.S.-based ISPs and hosting providers.
By Arielle Waldman • July 13, 2020 -
Brand Experience Team/TechTarget
Cybercriminals auction off admin credentials for $3,000
Threat actors are auctioning off domain administrator accounts, selling access to the highest bidder for an average of $3,139 and up to $140,000, according to Digital Shadows.
By Alexander Culafi • July 10, 2020 -
Brand Experience Team/TechTarget
How cyber warfare laws limit risk on a digital battleground
Retired Navy cryptologist implores enterprises to build key cyber warfare laws into their infosec strategy to improve survivability on the digital battleground in his new book.
By Packt Publishing, Katie Donegan • July 9, 2020 -
Brand Experience Team/TechTarget
Microsoft seizes malicious domains used in COVID-19 phishing
Microsoft went to court to seize several malicious domains that were used by cybercriminals in extensive phishing and BEC attacks on Office 365 accounts amid the current pandemic.
By Arielle Waldman • July 8, 2020 -
Brand Experience Team/TechTarget
Critical F5 Networks vulnerability under attack
A critical remote code execution vulnerability that was disclosed and patched just days ago is already being exploited by threat actors.
By Arielle Waldman • July 6, 2020 -
Brand Experience Team/TechTarget
Microsoft fixes Windows Codecs flaws with emergency patches
Microsoft addressed two vulnerabilities, one rated critical and the other rated important, after being alerted by a researcher with Trend Micro's Zero Day Initiative.
By Arielle Waldman • July 1, 2020 -
Brand Experience Team/TechTarget
Snake ransomware poses unique danger to industrial systems
The new ransomware family known as Snake, or Ekans, is designed for organizations with industrial control systems and has already struck at least two enterprises.
By Alexander Culafi • July 1, 2020 -
Brand Experience Team/TechTarget
Record-setting DDoS attacks indicate troubling trend
Akamai Technologies recently mitigated two of the largest DDoS attacks ever recorded on its platform, including a massive 809 million packets per second attack against a bank.
By Arielle Waldman • June 29, 2020 -
Brand Experience Team/TechTarget
Maze ransomware hit biggest target yet with LG breach
The operators of Maze ransomware claim to have breached LG, offering three screenshots as proof. One of those screenshots features LG product source code.
By Alexander Culafi • June 26, 2020 -
Brand Experience Team/TechTarget
Open source vulnerabilities down 20% in 2019
Snyk recently released its fourth annual 'State of Open Source Security' report, which analyzed open source statistics, vulnerability trends and security culture.
By Arielle Waldman • June 25, 2020 -
Brand Experience Team/TechTarget
MSPs scramble to bolster security amid ransomware spike
After a flurry of devastating ransomware attacks in 2019, MSPs and vendor partners are improving security to prevent history from repeating during the pandemic.
By Rob Wright • June 23, 2020 -
Brand Experience Team/TechTarget
New Cisco Webex vulnerability exposes authentication tokens
Trustwave SpiderLabs researchers disclosed a vulnerability in Cisco Webex software that leaks information stored in memory, including authentication tokens.
By Arielle Waldman • June 18, 2020 -
Brand Experience Team/TechTarget
ZDI drops 10 zero-day vulnerabilities in Netgear router
Trend Micro's Zero Day Initiative published 10 vulnerabilities in Netgear's R6700 router that have gone unpatched for seven months.
By Arielle Waldman • June 16, 2020
Previous
