Threats & Vulnerabilities: Page

KNOB attack puts all Bluetooth devices at risk

Security researchers discovered a way to force Bluetooth devices to use easy-to-crack encryption keys, which could lead to man-in-the-middle attacks and information leaks.

By Michael Heller • Aug. 20, 2019

2020 election security to face same vulnerabilities as in 2016

Confidence in the security of the 2020 election spanned the gamut, depending on who you asked at DEF CON's Voting Village, with local officials more optimistic than technologists.

By Michael Heller • Aug. 19, 2019

IoT botnets reach new threshold in Q2 of 2019

Defending against the rising number and increasing sophistication of IoT botnet attacks isn't an easy task. Learn about the latest threats and the techniques to mitigate them.

By Anthony Giandomenico • Aug. 14, 2019

Google wants Project Zero to be part of an open alliance

After five years of running Project Zero, Google wants to expand the scope to an open alliance of vulnerability researchers all working toward the same goal to 'make 0day hard.'

By Michael Heller • Aug. 13, 2019

ICS security threats rising, targeting oil and gas facilities

In its latest report on industrial control system threats, Dragos said it believes the first major 'destructive' ICS attack will likely occur at an oil and gas facility.

By Rob Wright • Aug. 9, 2019

Check Point finds RDP vulnerability jeopardizes Microsoft’s Hyper-V

Check Point revealed research at Black Hat that showed a previously disclosed vulnerability in Microsoft's remote desktop protocol affects the company's virtualization platform.

By Rob Wright • Aug. 8, 2019

Capital One breach suspect may have hit other companies

History from a Slack channel run by the Capital One data breach suspect points to data stolen from more organizations, but no evidence of other attacks has been found yet.

By Michael Heller • Aug. 2, 2019

Project Zero drops six iOS vulnerabilities ahead of Black Hat

Google Project Zero researchers disclosed six iOS vulnerabilities, including proof-of-concept code that could allow for attacks requiring no user interaction.

By Michael Heller • July 31, 2019

Slide deck brings BlueKeep exploit closer to the wild

After a description for building a remote BlueKeep exploit is posted on GitHub, experts warn that attacks in the wild are becoming more likely and users need to patch.

By Michael Heller • July 23, 2019

Researchers fool Cylance AI antimalware with ‘simple’ bypass

Security researchers developed a method to make "pure AI" antimalware products classify malware as benign, but it is unclear what antimalware solutions could be considered "pure AI."

By Michael Heller • July 23, 2019

Equifax to pay up to $700 million in data breach settlement

Under the settlement with the FTC and state attorneys general, Equifax will fork over at least $575 million in civil penalties and provide credit monitoring services to consumers.

By Rob Wright • July 22, 2019

New ransomware threat takes GandCrab’s place

Researchers released GandCrab master decryption keys, and in the wake of GandCrab's shutdown, a new ransomware threat -- called Sodin or Sodinokibi -- has emerged.

By Michael Heller • July 18, 2019

BlueKeep blues: More than 800,000 systems still unpatched

Despite alerts from Microsoft and the U.S. government, more than 800,000 online systems have yet to patch the Windows RDP vulnerability two months after it was disclosed.

By Rob Wright • July 17, 2019

E-commerce platforms used for domain spoofing against Best Buy

Despite efforts to flag spoofed domains imitating Best Buy, the sites are still active on e-commerce platforms like Shopify and GearLaunch, which have not taken them down.

By Rob Wright • July 17, 2019

How does an island hopping attack work?

Hackers know better than to directly attack a well-defended target; learn how they use island hopping attack strategies to elude defenders -- and how best to repel them.

By Peter Loshin • July 10, 2019

Building a threat intelligence framework: Here’s how

A robust threat intelligence framework is a critical part of a cybersecurity plan. A top researcher discusses what companies need to know.

By Mary Pratt • July 9, 2019

U.S. Cybercom warns Outlook vulnerability under attack

U.S. Cybercom issued an alert about active exploitation of a 2-year-old Microsoft Outlook flaw, and experts say an Iranian threat group is behind the attacks.

By Michael Heller • July 3, 2019

AI-enabled malware is coming, Malwarebytes warns

AI-driven threats may not be here yet, but a new report from Malwarebytes predicts they will be here soon and could potentially change the cybersecurity game for good.

By Mekhala Roy • June 28, 2019

DHS warns of increased Iranian cyberattacks on enterprises

The cyberthreat warning from Christopher Krebs, director of the DHS Cybersecurity and Infrastructure Security Agency, follows escalating tension between Iran and the U.S.

By Rob Wright • June 24, 2019

Dragos: Xenotime threat group targeting U.S. electric companies

Dragos says Xenotime, the threat group behind a devastating ICS attack in 2017, has been probing the networks of U.S. electric utilities and also attempted network intrusions.

By Rob Wright • June 14, 2019

RAMBleed: New Rowhammer attack can steal data from memory

Security researchers developed a Rowhammer attack variant, called RAMBleed, that can steal data from memory and works even if systems are patched against Rowhammer.

By Michael Heller • June 13, 2019

What is subdomain takeover and why does it matter?

Subdomain takeover exposure can happen when cloud-hosted web services are incompletely decommissioned, but configuration best practices can reduce the risks.

By Hanno Böck • June 13, 2019

Election security threats increasing pressure on state governments

As local and state governments continue to tackle the evolving threat landscape, experts share tips on how to improve security posture and highlight the resources available for help.

By Mekhala Roy • June 12, 2019

Google: Triada backdoors were pre-installed on Android devices

Google detailed the discovery and process of removing Triada malware after a supply chain attack led to backdoors being preinstalled on budget phones in overseas markets.

By Michael Heller • June 10, 2019

NSA issues BlueKeep warning as new PoC exploit demos

The NSA issued a rare warning for users to patch against the BlueKeep vulnerability on the same day a security researcher demoed an exploit leading to a full system takeover.

By Michael Heller • June 6, 2019