Threats & Vulnerabilities: Page

Critical SaltStack vulnerabilities exploited in several data breaches

SaltStack patched two critical vulnerabilities in its software last week, but hackers used the flaws over the weekend to breach several unpatched networks and systems.

By Rob Wright, Arielle Waldman • May 5, 2020

Shade ransomware decryptor released with 750,000 keys

Kaspersky Lab released a decryptor tool after operators behind the ransomware variant announced a shutdown of operations and issued an apology for any harm caused.

By Arielle Waldman • May 1, 2020

Telework security requires meticulous caution, communication

Organizations that are proactive about telework security may enjoy a more resilient network environment. Follow five steps in this webinar to ensure secure remote work.

By Kevin Beaver • April 30, 2020

Words to go: Types of phishing scams

IT teams must take proactive measures to address security awareness when it comes to email. Learn about the types of phishing scams to mitigate risk.

By Katie Donegan • April 30, 2020

Zero-day flaw in Sophos XG Firewall exploited in attacks

Sophos released an emergency patch over the weekend for its XG firewalls after threat actors exploited a zero-day SQL vulnerability in the products to steal customer data.

By Rob Wright, Alexander Culafi • April 27, 2020

Coronavirus phishing threats force heightened user awareness

As coronavirus phishing threats ramp up, organizations must turn to user education, in addition to traditional network security, as their best defense.

By Michael Heller • April 24, 2020

Emsisoft: U.S. ransomware attacks declined during pandemic

In the first quarter of 2020, the number of successful ransomware attacks on government and healthcare organizations in the U.S. decreased to a level unseen in years, Emsisoft said.

By Arielle Waldman • April 24, 2020

New spear phishing campaign targets oil and gas industry

Bitdefender researchers identified new spear phishing campaigns against the oil and gas industry that include emails with no typos and perfect usage of industry terminology.

By Alexander Culafi • April 22, 2020

Ransomware, cloud attacks more than doubled in 2019

New research by Trustwave shows 2019 saw huge increases in ransomware and cloud services attacks, as well as a big shift from spam toward business email compromise.

By Arielle Waldman • April 22, 2020

Cognizant discloses Maze ransomware attack

Cognizant was attacked by the Maze ransomware gang, the company confirmed Saturday. It's unclear whether Cognizant clients were also breached or infected with ransomware.

By Alexander Culafi • April 20, 2020

Ransomware attacks see 148% surge amid COVID-19

VMware Carbon Black saw a 148% increase in ransomware attacks in March over baseline levels in February, plus a massive spike in attacks on financial institutions.

By Alexander Culafi • April 17, 2020

Hackers embrace cryptocurrency laundering to evade the law

Cybercriminals are turning to cryptocurrency laundering methods to hide illicit proceeds as law enforcement agencies find success in tracing bitcoin transactions.

By Arielle Waldman • April 16, 2020

Malware found on 45 percent of home office networks

New research by BitSight compared malware infections on home office networks versus corporate networks, and the results were unsettling for remote enterprise users.

By Arielle Waldman • April 15, 2020

Russian threat group suspected of hacking SFO

San Francisco International Airport disclosed a data breach affected employees and third-party contractors, and ESET researchers said a Russian APT was likely behind the attack.

By Alexander Culafi • April 14, 2020

APTs infiltrated Linux servers undetected for nearly 10 years

New BlackBerry research shows how five APT groups operating on behalf of the Chinese government infiltrated enterprise Linux environments undetected for nearly a decade.

By Alexander Culafi • April 9, 2020

Zoom takes new security measures to counter ‘Zoombombing’

Zoom has implemented two key security and privacy measures in order to counter 'Zoombombing.' One enables passwords in meetings by default, while the second creates waiting rooms.

By Alexander Culafi • April 6, 2020

Microsoft warns hospitals of impending ransomware attacks

Microsoft warned "dozens" of hospitals with vulnerable gateway and VPN software that an infamous ransomware group known as REvil is scanning the internet for such flaws.

By Arielle Waldman • April 3, 2020

Zoom zero-day vulnerabilities patched a day after disclosure

An ex-NSA hacker reported two zero-day vulnerabilities on his blog Wednesday. One of them can give an attacker control of a user's webcam and microphone. Zoom fixed both flaws quickly.

By Alexander Culafi • April 2, 2020

Beazley: Ransomware attacks on clients ‘skyrocketed’ in 2019

The 2020 Beazley Breach Briefing reported a 131% increase in reported attacks against clients last year, and the insurance giant isn't expecting the trend to slow down.

By Arielle Waldman • April 2, 2020

Voatz disputes claims it was ‘kicked off’ HackerOne

HackerOne has cut ties with Voatz, but the mobile voting vendor disputed reports that it was kicked off the bug bounty platform following controversy with security researchers.

By Alexander Culafi • April 1, 2020

Coronavirus phishing lures continue to dominate threat landscape

Overall cybercrime activity isn't necessarily going up amid COVID-19, experts say. However, coronavirus-themed emails are becoming the dominant form of phishing attacks.

By Alexander Culafi • March 30, 2020

How to assess and prioritize insider threat risk

Dealing with the human element in security is tough, but critical. This primer describes the types of insider threats and how to use a risk matrix to assess and rank them by importance.

By Javvad Malik, Guest Contributor • March 30, 2020

Cyberinsurance carrier Chubb investigating possible data breach

Insurance giant Chubb confirmed it is investigating an incident that may involve the Maze ransomware group, which claims to have stolen sensitive data from the company.

By Arielle Waldman • March 27, 2020

Coronavirus phishing scams increase amid pandemic’s spread

Organizations must account for a sharp uptick of coronavirus phishing scams in their pandemic and business continuity plans. Learn about the trend here, with steps for mitigation.

By Katie Donegan • March 26, 2020

China’s APT41 attacks Citrix ADC flaws in cyberespionage campaign

A dual cyberespionage and cybercrime group known as APT41 exploited vulnerabilities in Citrix NetScaler/ADC and other products in an extensive, global threat campaign.

By Arielle Waldman • March 25, 2020