Threats & Vulnerabilities: Page

Flashpoint responds to evolving dark web threats

Cybersecurity firm Flashpoint updated its threat intelligence platform to better address evolving techniques and practices on the dark web, such as encrypted chat usage.

By Mekhala Roy • April 24, 2019

Carbanak source code found on VirusTotal 2 years ago

The source code for the Carbanak backdoor was found in a VirusTotal archive two years ago, and security researchers are now sharing the analysis of the source code publicly.

By Michael Heller • April 24, 2019

Marcus ‘MalwareTech’ Hutchins pleads guilty to Kronos charges

Marcus 'MalwareTech' Hutchins, known as being an integral player in stopping the WannaCry ransomware outbreak, pleads guilty to conspiring to create and distribute the Kronos banking Trojan.

By Michael Heller • April 22, 2019

DNS hijacking campaign targets national security organizations

A DNS hijacking campaign targeting national security organizations and critical infrastructure may be part of a new trend, according to the researchers behind recent attacks.

By Michael Heller • April 19, 2019

Microsoft disputes Outlook data breach report

Microsoft warned Outlook users who may have had data compromised in an attack using customer support login credentials to access account information over the course of months.

By Michael Heller • April 16, 2019

A look at security threats to critical infrastructure

Threats to critical infrastructure, like Operation Sharpshooter, should motivate CI sectors to take cybersecurity seriously. Learn about the threats and how to defend against them.

By Ernie Hayden • April 16, 2019

Huawei security questioned around the world

Troubles continue for Huawei as new bans and government reports put security into question, but the company is attempting to fight back against the criticism.

By Michael Heller • April 11, 2019

New Baldr information stealer could target businesses

Malwarebytes explains why the rapidly evolving info-stealer Baldr could spell trouble for businesses and consumers, and offers pointers on how to defend against such malware.

By Mekhala Roy • April 11, 2019

Cybercrime groups continue to flourish on Facebook

Security researchers found cybercrime groups using Facebook out in the open for illegal activity and the findings are very similar to an issue Facebook had last year.

By Michael Heller • April 5, 2019

Radware: DDoS amplification attacks increasing, evolving

As DDoS attacks continue to evolve, planning for DDoS attack prevention and mitigation has become a critical business priority. Radware's Daniel Smith offers advice.

By Mekhala Roy • April 5, 2019

Pipdig WordPress plugin accused of DDoS attacks and backdoors

Pipdig, a blog theme and plugin company, was accused of using obfuscated code to gain backdoor access to customer blogs and launch low-scale DDoS attacks on rivals.

By Michael Heller • April 4, 2019

‘Triple threat’ malware campaign combines Emotet, TrickBot and Ryuk

Cybereason sounds off on the recently discovered 'triple threat' campaign and highlights interesting features of the attack technique used by cybercriminals.

By Mekhala Roy • April 3, 2019

Proof-of-concept Magento exploit used in attacks

Experts are urging users to patch after a proof-of-concept Magento exploit was picked up by malicious actors and used in attempted attacks on e-commerce websites.

By Michael Heller • April 3, 2019

CrowdStrike: Cybercrime groups joining forces to pack more punch

CrowdStrike sounds off on the enhanced partnership between the cybercrime groups behind the TrickBot and BokBot malware and explains what such collaborations signify.

By Mekhala Roy • March 26, 2019

Asus backdoor hits targets with officially signed update

Attackers infected the official Asus Live Updater to install a malicious backdoor on hundreds of thousands of systems, with the intent of targeting a small subset of those users.

By Michael Heller • March 26, 2019

Protect your enterprise against shadow IT in the cloud

More technologies than ever are available to people now that the cloud is so pervasive, and, as a result, shadow IT has become a problem. Expert Michael Cobb explains what to do.

By Michael Cobb • March 26, 2019

FEMA data exposure affects 2.3 million disaster victims

FEMA's data exposure is another high-profile example of accidental data disclosures -- a trend that has some security experts calling for more focus on failed security controls.

By Rob Wright • March 25, 2019

How concerned should I be about a padding oracle attack?

Padding oracle attacks have long been well-known and well-understood. Find out how they work and why using modern encryption protocols can reduce the risks.

By Hanno Böck • March 25, 2019

New Mirai malware variant targets enterprise devices

Researchers from Palo Alto Networks have spotted a new variant of the Mirai botnet that is targeting enterprise presentation systems and digital signage with 11 new exploits.

By Mekhala Roy • March 20, 2019

Experts praise Norsk Hydro cyberattack response

Aluminum manufacturer Norsk Hydro was hit with ransomware that forced a switch to manual operations. The company's incident response has experts impressed.

By Michael Heller • March 20, 2019

How does BGP hijacking work and what are the risks?

The lack of security protections in BGP means that route hijacking can be easy, especially for organized crime or state-backed threat actors. Here are ways to deal with it.

By Peter Loshin • March 20, 2019

Critical WinRAR bug exploited in targeted attacks

A critical WinRAR bug that was exposed after 19 years is already being exploited in targeted attacks in the Middle East and United States, despite the availability of patch.

By Michael Heller • March 19, 2019

Why do DDoS attack patterns rise in the autumn?

DDoS attack patterns indicate a sharp escalation in the fall. Why does that occur and what can be done to guard against these attacks?

By Nick Lewis • March 14, 2019

Election security threats loom as presidential campaigns begin

Fragile electronic voting systems and the weaponization of social media continue to menace U.S. election systems as presidential candidates ramp up their 2020 campaigns.

By Bridget Botelho • March 13, 2019

SANS Institute: DNS attacks gaining steam in 2019

At RSA Conference 2019, experts from the SANS Institute discuss the most dangerous attack techniques they've seen, including DNS manipulation and domain fronting.

By Mekhala Roy • March 13, 2019