Threats & Vulnerabilities: Page

CIA unaware of Vault 7 theft until WikiLeaks dump

An internal CIA report from the Wikileaks Task Force blasted the agency over the leak of the Vault 7 cyberweapons, which exposed dangerous hacking tools and vulnerabilities.

By Alexander Culafi • June 16, 2020

Italian company implicated in GuLoader malware attacks

While analyzing the network dropper GuLoader, researchers found an almost identical commercial software tool called CloudEye offered by a legitimate-looking Italian company.

By Arielle Waldman • June 11, 2020

Overcome AWS security vulnerabilities with VPCs, IAM

Securing network access in AWS requires the right rules to be in place. Learn more about Virtual Private Clouds and how implementing them can prevent common cloud security attacks.

By Katie Donegan • June 11, 2020

New ‘Thanos’ ransomware weaponizes RIPlace evasion technique

Recorded Future's Insikt Group uncovered a new ransomware-as-a-service tool named 'Thanos' that's the first ransomware to use the hard-to-detect RIPlace technique.

By Alexander Culafi • June 10, 2020

Maze ransomware builds ‘cartel’ with other threat groups

Operators behind the Maze ransomware posted data leaks from competing ransomware gangs to their victim shaming website, suggesting they have joined forces.

By Arielle Waldman • June 10, 2020

‘CallStranger’ vulnerability affects billions of UPNP devices

A new vulnerability in the Universal Plug and Play protocol could be used to exfiltrate enterprise data and launch DDoS attacks, and patches may not arrive for a long time.

By Rob Wright • June 9, 2020

CISA warns Microsoft SMB v3 vulnerability is under attack

CISA issued an alert Friday about attacks on a Microsoft Server Message Block v3 vulnerability and a proof-of-concept code that exploits the flaw in unpatched systems.

By Alexander Culafi • June 8, 2020

Chinese, Iranian hackers targeted Trump and Biden campaigns

Shane Huntley, director of Google's Threat Analysis Group, announced that two state-backed APT groups targeted campaign staff for both Joe Biden and President Donald Trump.

By Arielle Waldman • June 5, 2020

Attacks on Exim vulnerability continue one year later

Though the Exim mail transfer agent vulnerability was publicly disclosed in June 2019, a significant number of unpatched versions remain online and are at risk of attacks.

By Arielle Waldman • June 4, 2020

VMware vulnerability enables takeover of cloud infrastructure

A new vulnerability in VMware Cloud Director allowed any user to obtain control of any virtual machine on a public or private cloud, according to ethical hacking firm Citadelo.

By Alexander Culafi • June 2, 2020

Cisco servers breached through SaltStack vulnerabilities

Threat actors exploited critical SaltStack flaws, which were disclosed and patched last month, in a Cisco product to breach several of the networking company's salt-master servers.

By Alexander Culafi • May 29, 2020

Supply chain attack hits 26 open source projects on GitHub

Threat actors conducted an unprecedented supply chain attack by using malware known as Octopus Scanner to create backdoors in open source projects, which were uploaded to GitHub.

By Arielle Waldman • May 28, 2020

Top 3 advantages of smart cards -- and potential disadvantages

As smart card adoption increases, it is prudent to take a closer look at how this technology can improve data security. Here, read more about the benefits of smart cards.

By Joel Snyder, Katie Donegan • May 27, 2020

StrandHogg 2.0 allows attackers to imitate most Android apps

A new elevation-of-privilege vulnerability on Android, dubbed StrandHogg 2.0, allows threat actors to gain access to most apps, according to Norwegian mobile security firm Promon.

By Alexander Culafi • May 26, 2020

Mandiant dishes on notorious Maze ransomware group

Mandiant threat researchers navigate the tools, tactics and procedures of the Maze ransomware group, which has become notorious for "shaming" victims with stolen data.

By Arielle Waldman • May 26, 2020

Ragnar Locker ransomware attack hides inside virtual machine

Threat actors have developed a new type of attack method by hiding Ragnar Locker ransomware inside a virtual machine to avoid detection.

By Alexander Culafi • May 22, 2020

Verizon DBIR: Breaches doubled, but plenty of silver linings

The 2020 Verizon Data Breach Investigations Report showed the number of confirmed breaches last year nearly doubled, but it also highlighted some positive trends.

By Arielle Waldman • May 19, 2020

Texas struck by two ransomware attacks in one week

The Texas Department of Transportation was hit with a ransomware attack last Thursday, marking the second ransomware incident on a state agency in less than a week.

By Alexander Culafi • May 18, 2020

CISA identifies malware from North Korean hacking group

The Cybersecurity and Infrastructure Security Agency, in conjunction with the FBI and DoD, has identified three variants of malware used by the North Korean government.

By Alexander Culafi • May 14, 2020

Experts say mobile voting tech isn’t the answer to COVID-19

Despite the mounting need for another alternative to in-person voting amid the COVID-19 pandemic, experts say mobile and online voting is just not ready for the general public.

By Alexander Culafi • May 13, 2020

Q1 data breaches down, but exposed records reach new high

Threat intelligence firm Risk Based Security released its 2020 Q1 Report, which shows a 273 percent increase in exposed records and 42 percent decrease in publicly reported breaches.

By Arielle Waldman • May 12, 2020

Advanced Computer Software leak exposes nearly 200 law firms

Researchers at cybersecurity vendor TurgenSec discovered an exposed database owned by Advanced Computer Software that contained legal documents with data from 190 law firms.

By Alexander Culafi • May 7, 2020

Healthcare organizations sitting on ‘unexploded’ ransomware

While threat reports show ransomware attacks against healthcare organizations are down, experts say threat actors may be lurking in networks and waiting to strike at a later date.

By Alexander Culafi • May 6, 2020

The risks and effects of spyware

Spyware can steal mundane information, track a user's every move and everything in between. Read up on the types of spyware and how to best fix infected devices.

By Michael Cobb, Michael Heller • May 6, 2020

Identifying common Microsoft 365 security misconfigurations

Microsoft 365 security problems can double the time it takes to contain a breach, according to a new survey. Check out best practices and operational strategies to fix them.

By Johna Till Johnson • May 5, 2020