Threats & Vulnerabilities: Page
-
Brand Experience Team/TechTarget
Citrix patches for ADC and Gateway flaw to begin rolling out next week
Citrix announced security fixes on the way one month after disclosing a vulnerability in its ADC and Gateway appliances, which has already seen preliminary attacks in the wild.
By Michael Heller • Jan. 14, 2020 -
Brand Experience Team/TechTarget
Expert Advice
7 TCP/IP vulnerabilities and how to prevent them
While many TCP/IP security issues are in the protocol suite's implementation, there are some vulnerabilities in the underlying protocols to be aware of.
By Sharon Shea • Jan. 13, 2020 -
Brand Experience Team/TechTarget
Experts weigh in on risk of Iranian cyberattacks against U.S.
Cybersecurity experts weigh in on the risks of potential nation-state cyberattacks from Iran following a DHS warning and heightened tensions between the country and the U.S.
By Michael Heller • Jan. 8, 2020 -
Brand Experience Team/TechTarget
Pulse Secure VPN vulnerability targeted with ransomware
Threat actors appear to be exploiting vulnerable Pulse Secure VPN servers to hit enterprises with ransomware attacks, even though a patch has been available since April 2019.
By Michael Heller • Jan. 7, 2020 -
Brand Experience Team/TechTarget
Two attacks on Maze ransomware list confirmed
Another confirmed ransomware attack, this time against Busch's Fresh Food Markets, was added to the Maze gang's ransomware shaming list after the company refused to pay the ransom.
By Michael Heller • Dec. 19, 2019 -
Brand Experience Team/TechTarget
Maze gang outs ransomware victims in shame campaign
The threat actors behind Maze ransomware started a campaign to pressure victims into paying ransom by publicly listing successful attacks and threatening to leak data.
By Michael Heller • Dec. 17, 2019 -
Brand Experience Team/TechTarget
City of Pensacola hit by ransomware attack
A cyberattack, later confirmed to be ransomware, hit the city of Pensacola, Florida on Saturday, and the city is currently in the process of responding.
By Alexander Culafi • Dec. 10, 2019 -
Brand Experience Team/TechTarget
Ryuk ransomware change breaks decryption tool
The threat actors behind Ryuk ransomware made changes to their code that have made the official decryption tool unreliable, according to security researchers.
By Michael Heller • Dec. 10, 2019 -
Brand Experience Team/TechTarget
DOJ takes action against Dridex malware group, Evil Corp
The U.S. Justice Department indicts two alleged members of the Russian threat group behind the Dridex banking Trojan, known as Evil Corp, and offers a $5 million bounty.
By Michael Heller • Dec. 5, 2019 -
Brand Experience Team/TechTarget
Session cookie mishap exposed HackerOne private reports
A security researcher used a mishandled session cookie to access private HackerOne bug reports with an account takeover attack and earned a bug bounty for their efforts.
By Michael Heller • Dec. 5, 2019 -
Brand Experience Team/TechTarget
Exposed Firebase databases hidden by Google search
A security researcher found that Google's search engine hides results for misconfigured Firebase databases that are publicly accessible on the internet.
By Rob Wright • Dec. 2, 2019 -
Brand Experience Team/TechTarget
Ransomware attacks shaking up threat landscape -- again
Threat actors have employed new techniques and built more sophisticated business models for their ransomware campaigns, which has had devastating consequences.
By Rob Wright • Nov. 25, 2019 -
Brand Experience Team/TechTarget
Ohio builds ‘Cyber Reserve’ to combat cyberattacks
Ohio is building a 'Cyber Reserve,' a civilian cybersecurity force alongside the state's National Guard that will be deployed to help local governments recover from cyberattacks.
By Alexander Culafi • Nov. 21, 2019 -
Brand Experience Team/TechTarget
Louisiana ransomware attack hits government systems
A ransomware attack on Louisiana government systems has been contained, according to Governor John Bel Edwards, and experts are praising the state's response.
By Michael Heller • Nov. 19, 2019 -
Brand Experience Team/TechTarget
Check Point: Qualcomm TrustZone flaws could be ‘game over’
Researchers discovered vulnerabilities in Qualcomm TrustZone that Check Point says could lead to 'unprecedented access' because of the extremely sensitive data stored in mobile secure elements.
By Michael Heller • Nov. 15, 2019 -
Brand Experience Team/TechTarget
ZombieLoad v2 disclosed, affects newest Intel chips
Researchers disclosed another variant of the ZombieLoad side-channel attack that affects the newest Intel processors, and also discovered a flaw in the original ZombieLoad patch.
By Michael Heller • Nov. 13, 2019 -
Brand Experience Team/TechTarget
ConnectWise ransomware attacks affecting Automate customers
ConnectWise warned that ransomware attacks are targeting open ports for its Automate on-premises application, but the company has offered few details about the nature of the attacks.
By Michael Heller • Nov. 8, 2019 -
Brand Experience Team/TechTarget
Trend Micro insider threat steals, sells customer data
A Trend Micro employee stole and sold customer support data, which was used by a malicious third-party actor to scam consumer customers of the cybersecurity company.
By Alexander Culafi • Nov. 7, 2019 -
Brand Experience Team/TechTarget
SSL certificate abuse drives growing number of phishing attacks
Phishing attacks against the United Nations and humanitarian organizations show how threat actors are weaponizing valid SSL certificates and how hard it is to stop the abuse.
By Alexander Culafi • Nov. 7, 2019 -
Brand Experience Team/TechTarget
Firefox bug is enabling attackers to freeze out users
A recently reported bug in Firefox allows spammed authentication dialogs to lock users out of their browsers and it is under attack in the wild, despite previous efforts to patch.
By Michael Heller • Nov. 6, 2019 -
Brand Experience Team/TechTarget
First BlueKeep attacks in the wild may be dark portents
Following months of warnings from law enforcement and the infosec community, the first BlueKeep exploit campaign was discovered in the wild and experts say it won't be the last.
By Michael Heller • Nov. 5, 2019 -
Brand Experience Team/TechTarget
Quiz
Test your grasp of AI threats, privacy regulations and more
Test your grasp of current security topics like AI in cybersecurity and what privacy regulations require. Then receive CPE credit by passing this quiz.
By Brenda Horrigan • Nov. 4, 2019 -
Brand Experience Team/TechTarget
Adsterra still connected to malvertising campaign, despite denials
Despite a pledge of "zero tolerance" for malicious activity, ad network Adsterra was found to be once again connecting with the Master134 malvertising campaign.
By Rob Wright • Oct. 31, 2019 -
Brand Experience Team/TechTarget
Imperva CEO steps down following breach investigation
Chris Hylen unexpectedly stepped down as CEO of Imperva in the wake of a data breach involving cloud WAF customer data, though it's unclear if the two events are connected.
By Michael Heller • Oct. 30, 2019 -
Brand Experience Team/TechTarget
Adobe exposure includes data on 7.5 million users
Adobe exposed data on 7.5 million users and employees and one expert says the incident highlights why production data shouldn't be used in test environments.
By Michael Heller • Oct. 29, 2019
Previous
