Threats & Vulnerabilities: Page

Deepfakes: Security experts undecided on the threat level

Deepfakes may seem like a scary new threat in today's world, but should the world be worried? SearchSecurity asked numerous experts to weigh in at RSA Conference 2020.

By Alexander Culafi • March 19, 2020

Maze ransomware gang pledges to stop attacking hospitals

The infamous Maze gang announced it has stopped ransomware attacks on healthcare and medical facilities because of the seriousness of the coronavirus pandemic.

By Rob Wright • March 19, 2020

Ransomware attacks poised to disrupt coronavirus response efforts

Experts fear that coronavirus-themed threats will escalate to ransomware attacks, and such attacks will disrupt response efforts at hospitals and city, state and local governments.

By Alexander Culafi • March 17, 2020

Ransomware attack hits Champaign-Urbana Public Health District

A ransomware attack shut down Champaign-Urbana's public health website, hindering the city's ability to provide information and updates on the Coronavirus pandemic.

By Arielle Waldman • March 13, 2020

Microsoft discloses wormable SMBv3 flaw without a patch

Microsoft disclosed a new remote code execution vulnerability associated with the Microsoft Server Message Block 3.1.1 (SMBv3) protocol, but there's currently no patch available.

By Alexander Culafi • March 11, 2020

Microsoft leads takedown of Necurs botnet

Microsoft, BitSight and other partners used legal and technical steps to take control of one of largest botnets in the world that infected more than 9 million systems.

By Arielle Waldman • March 11, 2020

How nation-state cyberattacks affect the future of infosec

Any company can be a nation-state cyberattack victim. Brush up on the latest and most common nation-state techniques and their implications on the threat landscape of tomorrow.

By Johna Till Johnson • March 10, 2020

Researchers develop new side channel attacks on AMD chips

Security researchers behind the Meltdown and Spectre flaws discovered new side channel attacks on AMD processors, but the chipmaker has opted not to patch them.

By Rob Wright • March 9, 2020

Intel CSME flaw deemed ‘unfixable’ by Positive Technologies

Positive Technologies researchers discovered a previously disclosed vulnerability in the Intel Converged Security and Management Engine is worse than originally reported.

By Arielle Waldman • March 6, 2020

CrowdStrike founder: China hacking indictments are working

During his RSA Conference keynote, CrowdStrike co-founder Dmitri Alperovitch explains why the U.S. Department of Justice's indictments against Chinese hackers has been effective.

By Alexander Culafi • Feb. 27, 2020

FBI: $144 million in ransomware payments made over 6 years

In an RSA Conference 2020 session, FBI agent Joel DeCapua revealed how much money has been paid in ransoms, what the most pervasive ransomware variants are and more.

By Alexander Culafi • Feb. 25, 2020

Voatz, MIT researchers spar over blockchain e-voting app

MIT researchers contested claims that Voatz's voting app used blockchain technology to provide secure voting. Voatz responded, but questions about the company's technology remain.

By Rob Wright, Alexander Culafi • Feb. 20, 2020

Why ransomware attacks on municipalities spiked in 2019

Ransomware spread to a number of city, state and local governments across the U.S. in 2019. Threat researchers weigh in on the increased attacks and what to expect in 2020.

By Arielle Waldman • Feb. 19, 2020

Voatz mobile voting app deemed insecure by MIT researchers

Security researchers at MIT claim a mobile e-voting app piloted in several state elections is insecure, but the vendor has aggressively pushed back on the findings.

By Rob Wright, Alexander Culafi • Feb. 13, 2020

Chinese military personnel charged in Equifax breach

Four members of China's military have been charged for hacking Equifax following a 2017 breach that compromised nearly 150 million Americans' personal information.

By Alexander Culafi • Feb. 10, 2020

Threat actors combining data exposure with ransomware attacks

New Cisco Talos research shows an increase in ransomware attacks that double the pressure on victims by threatening them with the exposure of their sensitive data.

By Arielle Waldman • Feb. 5, 2020

Fresh thinking on cybersecurity threats for 2020

It's a good time to take a clear-eyed view of the likely security threats facing your organization. But then what? Experts suggest getting creative with your threat responses.

By Brenda Horrigan • Feb. 3, 2020

Pen Testing as a Service (PTaaS)

Pen testing as a service (PTaaS) is a cloud service that provides information technology (IT) professionals with the resources they need to conduct and act upon point-in-time and continuous penetration tests.

By TechTarget Contributor • Jan. 31, 2020

Payment cards from Wawa data breach found on dark web

Payment card information from customers of the convenience store chain Wawa has reportedly gone up for sale on the dark web, though questions about the breach remain.

By Alexander Culafi • Jan. 30, 2020

‘CacheOut’: Researchers unveil new attack on Intel chips

Researchers unveiled a new speculative execution attack that leaks data from most Intel microprocessors and gives attackers greater control over what data is leaked.

By Rob Wright • Jan. 28, 2020

3 Magecart suspects arrested in Interpol operation

Three alleged cybercriminals suspected of being associated with Magecart were arrested in Indonesia via an Interpol-assisted operation called Operation Night Fury.

By Alexander Culafi • Jan. 28, 2020

Citrix patches vulnerability as ransomware attacks emerge

Citrix rolls out more patches ahead of schedule for CVE-2019-19781, a directory traversal vulnerability that affects Citrix ADC, Gateway and SD-WAN WANOP products.

By Rob Wright • Jan. 24, 2020

CyCognito turning tables by using botnets for good

In this Q&A with CyCognito CEO Rob Gurzeev, he discusses what led to his company, how attack simulations work and how he plans to spend the company's recent round of funding.

By Alexander Culafi • Jan. 20, 2020

Unpatched Citrix vulnerability expands as mitigations fall short

Citrix discovered another product affected by last month's vulnerability, while security researchers found an attacker blocking exploits of the vulnerability.

By Michael Heller • Jan. 17, 2020

NSA reports flaw in Windows cryptography core

Microsoft patched a critical vulnerability in how Windows validates cryptographic certificates that could lead to dangerous attacks, according to experts, and was originally reported by the NSA.

By Michael Heller • Jan. 15, 2020