Threats & Vulnerabilities: Page

Another CCleaner attack hits Avast supply chain

Avast was able to stop an attempted supply chain attack targeting its CCleaner software, but experts say all enterprises should be wary of similar supply chain attacks.

By Michael Heller • Oct. 23, 2019

Exposed Docker hosts open the door for cryptojacking

Security researchers discovered a new Docker worm that has been targeting exposed hosts in order to spread cryptojacking malware to other containers.

By Beth Pariseau, Michael Heller • Oct. 16, 2019

Cybersecurity threats on the rise, prey on human nature

Cybersecurity attacks continue to rise, taking advantage of network vulnerabilities -- and human ones. First National Technology Solutions' CISO offers advice.

By Tanner Harding • Oct. 11, 2019

Twitter 2FA data ‘inadvertently’ used for advertising

Twitter used two-factor authentication information, including email addresses and phone numbers, to target ads for an unknown number of people over an unknown period of time.

By Michael Heller • Oct. 9, 2019

NSA warns VPN vulnerabilities exploited by nation-state hackers

Nation-state hackers are exploiting previously disclosed vulnerabilities in VPNs from Pulse Secure, Palo Alto Networks and Fortinet, according to a security advisory from the NSA.

By Rob Wright • Oct. 8, 2019

Experts expect hospital ransomware attacks to continue

One week after being hit by a ransomware attack, hospitals in Alabama are turning away patients while working on recovery, and experts warn of similar attacks in the future.

By Michael Heller • Oct. 8, 2019

Zendesk breach in 2016 affected 10,000 customers

Zendesk disclosed a previously undetected security incident from 2016 in which data for 10,000 customer accounts was accessed, but the disclosure is missing some key details.

By Michael Heller • Oct. 3, 2019

Hospital ransomware attacks lead to patients being turned away

Ransomware attacks hit seven hospitals in Australia and three in Alabama, with the Alabaman hospitals being forced to turn away patients because of the attacks.

By Michael Heller • Oct. 2, 2019

Trump pushes debunked DNC hack conspiracy in call with Ukraine

In a call with the Ukrainian president that is now the focus of an impeachment inquiry, President Trump discussed CrowdStrike and asked for help with finding a 'server.'

By Michael Heller • Sept. 25, 2019

Cloudflare battles malicious bots with ‘fight mode’

Cloudflare takes its first steps in keeping malicious bots from attacking customers by using complex challenges to waste a bot's CPU resources in an attempt to disincentivize more bots.

By Michael Heller • Sept. 24, 2019

Broken WannaCry variants continuing to spread

Researchers are still seeing surprisingly high WannaCry detection rates and they worry this points to high risks because systems still aren't being patched against threats.

By Michael Heller • Sept. 20, 2019

Sinkholed Magecart domains resurrected for advertising schemes

Security vendor RiskIQ discovered several old Magecart domains that had been sinkholed were re-registered under new owners and are now engaged in fraudulent advertising activity.

By Rob Wright • Sept. 20, 2019

Global cryptomining attacks use NSA exploits to earn Monero

Security researchers tracked a very active threat group launching cryptomining attacks around the world against organizations in banking, IT services, healthcare and more.

By Michael Heller • Sept. 18, 2019

New evasive spear phishing attacks bypass email security measures

Researchers identified a new email security threat: evasive spear phishing attacks, which take months of investigation and social engineering to coordinate.

By Katie Donegan • Sept. 18, 2019

Researcher finds digital certificate fraud used to spread malware

A new certificate fraud scheme involves a threat actor impersonating company execs to purchase certs which are then resold to those looking to spread malware.

By Michael Heller • Sept. 17, 2019

FBI says $26B lost to business email compromise over last 3 years

On the same day that 281 suspects were arrested in business email compromise stings, the FBI said worldwide losses from BEC attacks reached $26 billion over the last three years.

By Rob Wright • Sept. 11, 2019

DerbyCon session tackles cyber attribution, false flag attacks

One expert showed the crowd at DerbyCon that proper attribution of a cyberattack requires multiple indicators in order to avoid being fooled by a false flag attempt.

By Michael Heller • Sept. 10, 2019

Insecure Android provisioning could lead to phishing attacks

Researchers say many -- if not most -- Android smartphones are at risk of SMS-based phishing attacks that trick users into installing malicious OTA provisioning settings.

By Michael Heller • Sept. 5, 2019

Chronicle: Crimeware group takedowns ‘increasingly ineffectual’

Law enforcement takedowns of cybercrime operations may not be producing the desired results, according to an extensive, five-year study from Alphabet Inc.'s Chronicle.

By Rob Wright • Sept. 5, 2019

How does AttackSurfaceMapper help with attack surface mapping?

A new open source pen testing tool expedites attack surface mapping -- one of the most important aspects of any penetration testing engagement.

By Peter Loshin • Sept. 5, 2019

Hackers earn nearly $2M in HackerOne’s hacking event

One hundred hackers and 75 hackers in training gathered in Las Vegas for HackerOne's hacking event to find security flaws in organizations, including Verizon Media and GitHub.

By Ha Ta • Sept. 5, 2019

USBAnywhere vulnerabilities put Supermicro servers at risk

Security researchers discovered BMC vulnerabilities -- dubbed USBAnywhere -- in Supermicro servers that could put systems at risk of remote attacks via virtualized USB drives.

By Michael Heller • Sept. 4, 2019

Suspect in Capital One breach indicted for additional intrusions

The alleged Capital One hacker, Paige Thompson, was charged with additional counts of fraud and abuse for stealing data from more than 30 other organizations.

By Michael Heller • Aug. 29, 2019

What’s the best way to prevent XSS attacks?

To prevent cross-site scripting attacks, software developers must validate user input and encode output. Review characters to filter out, as well as sources and sinks to avoid.

By Charles Shirer • Aug. 23, 2019

Texas ransomware attack hits 22 municipalities, demands $2.5M

Ransomware attacks hit 22 municipalities around Texas, most of which appear to be smaller local governments, but the details surrounding the attacks are still unclear.

By Michael Heller • Aug. 21, 2019