Threats & Vulnerabilities: Page

Microsoft issues second BlueKeep warning urging users to patch

Microsoft again urged users to patch against the BlueKeep vulnerability as more potential exploits surface and one researcher discovered almost 1 million vulnerable systems.

By Michael Heller • June 4, 2019

Ransomware attacks on local and state governments increasing

State and local governments are experiencing a rise in ransomware attacks. Experts sound off on what's triggering this trend and offer best practices for defense.

By Mekhala Roy • May 31, 2019

Dark data raises challenges, opportunities for cybersecurity

Dark data is the data enterprises didn't know they had. Splunk CTO Tim Tully explains where this data is hiding, why it's important and how to use and secure it.

By Peter Loshin • May 30, 2019

Hackers scan for MySQL ransomware targets

A security researcher found that malicious actors have been scanning database servers for MySQL ransomware targets running on Windows, but mitigation should be relatively easy.

By Michael Heller • May 29, 2019

Microsoft bets on ElectionGuard SDK to fortify election security

Ahead of the 2020 elections, Microsoft unveiled ElectionGuard, an open source SDK designed to provide end-to-end verification of electronic voting machine results.

By Mekhala Roy • May 23, 2019

‘BlueKeep’ Windows Remote Desktop flaw gets PoC exploits

Multiple researchers created proof-of-concept exploits, including remote code execution attacks, targeting the recently patched Windows Remote Desktop flaw called BlueKeep.

By Michael Heller • May 23, 2019

MEMS (micro-electromechanical systems)

A MEMS (micro-electromechanical system) is a miniature machine that has both mechanical and electronic components.

By Alexander Gillis • May 17, 2019

ZombieLoad: More side channel attacks put Intel chips at risk

Another set of side channel vulnerabilities were discovered in Intel chips. Security researchers explain the risks posed by the flaws and offer advice on mitigation steps.

By Mekhala Roy • May 16, 2019

Words to go: GPS tracking security

GPS and location-based services may be some of the most significant recent technological advancements, but they can also put personal privacy in jeopardy.

By Katie Donegan • May 16, 2019

WannaCry infections continue to spread 2 years later

Two years after the initial wave of WannaCry attacks, security researchers said the ransomware continues to spread to vulnerable devices even though it's not encrypting data.

By Michael Heller • May 15, 2019

Verizon DBIR: Ransomware still a major threat, despite reports

The 2019 Verizon Data Breach Investigations Report challenges the wisdom that cryptomining attacks replaced ransomware as the dominant malware threat last year.

By Rob Wright and Mekhala Roy • May 14, 2019

Zero-day WhatsApp vulnerability could lead to spyware infection

A zero-day vulnerability in WhatsApp was used in targeted attacks that involved installing spyware on mobile devices, which may be the work of an advanced threat actor.

By Michael Heller • May 14, 2019

DDoS attacks among top 5G security concerns

DDoS attacks top the list of primary security concerns for mobile operators now that 5G wireless is advancing as the number of connected devices grows.

By Madelyn Bacon • May 13, 2019

2019 Verizon DBIR highlights cyberespionage, nation-state attacks

The 2019 Verizon Data Breach Investigations Report showed significant increases in cyberespionage and nation-state activity. It also painted a gloomy picture for email threats.

By Rob Wright • May 8, 2019

Enterprise security threats rising, consumer attacks falling

Cybercriminals are increasingly taking aim at businesses, according to a recent Malwarebytes report. Security experts weigh in on best practices for defending against malware attacks.

By Mekhala Roy • May 6, 2019

Cisco SSH vulnerability sparks debate over backdoors

Cisco released a patch for a critical vulnerability in Nexus 9000 switches that could allow a remote attacker to gain root access because of the use of a default SSH key pair.

By Michael Heller • May 6, 2019

CrowdStrike tackles BIOS attacks with new Falcon features

CrowdStrike added firmware attack detection capabilities to its Falcon platform and also expanded its partnership with Dell to help organizations tackle BIOS threats.

By Mekhala Roy • May 2, 2019

White Ops: Ad fraud bot activity waning, but threats still loom

A new study from security vendor White Ops shows a decline in digital ad fraud, but the company says the battle against cybercriminals abusing ad platforms is far from over.

By Rob Wright • May 2, 2019

Inside ‘Master134’: ExoClick tied to previous malvertising campaigns

Online ad network ExoClick denied any involvement in the Master134 campaign, but the company has ties to similar malvertising threats.

By Rob Wright • April 30, 2019

Inside ‘Master134’: More ad networks tied to malvertising campaign

Check Point's report on the Master134 malvertising campaign implicated five ad networks, but a SearchSecurity investigation revealed more companies were involved.

By Rob Wright • April 30, 2019

Inside ‘Master134’: Propeller Ads connected to malvertising campaign

A SearchSecurity investigation determined ad network Propeller Ads played a significant role in the early stages of the Master134 malvertising campaign.

By Rob Wright • April 30, 2019

Inside ‘Master134’: Adsterra’s history shows red flags, abuses

Adsterra denied it was involved in the Master134 malvertising campaign, but a review of the company's history reveals many red flags, including activity in a similar campaign.

By Rob Wright • April 30, 2019

‘Master134’ malvertising campaign raises questions for online ad firms

Malvertising and adware schemes are a growing concern for enterprises. Our deep investigation into one campaign reveals just how complicated threats can be to stop.

By Rob Wright • April 30, 2019

FBI report says BEC attacks are increasing, evolving

According to the FBI's 2018 Internet Crime Report, business email compromise attacks are on the rise. Security experts highlight how BEC scams are evolving.

By Mekhala Roy • April 26, 2019

Carbanak malware was recording video of victims’ desktops

Researchers from FireEye spent hundreds of hours analyzing the Carbanak backdoor malware and its source code and were surprised by some of the features it contained.

By Michael Heller • April 26, 2019