Threats & Vulnerabilities: Page

Citrix data breach report raises more questions

Citrix disclosed a potential data breach blamed on poor password security, but a lack of details about the attack leaves only unconfirmed claims from a single cybersecurity firm.

By Michael Heller • March 13, 2019

Zscaler charts sharp increase in SSL threats like phishing, botnets

Threat actors are exploiting encryption protocols to deliver malicious content, according to Zscaler, which found a 400% increase in SSL-based phishing threats last year.

By Mekhala Roy • March 11, 2019

Nation-state threats grow more sophisticated, converge on targets

Incident response experts say nation-state cyberattacks are so common that they find threat actors from multiple nations operating in the same victim environment.

By Rob Wright • March 7, 2019

FBI: How we stopped the Mirai botnet attacks

FBI Special Agent Elliott Peterson gave RSA attendees a behind-the-scenes look at the investigation into the Mirai botnet following the devastating DDoS attacks in 2016.

By Rob Wright • March 7, 2019

Understanding the new breed of command-and-control servers

Command-and-control servers are now using public cloud services, social media and other resources to evade detection. What should enterprises do to combat these threats?

By Nick Lewis • March 1, 2019

Top 5 email security issues to address in 2019

The top five email security issues come from a variety of places, from email phishing to account takeovers. Our security expert recommends being vigilant and poised to take action.

By Kevin Tolly • March 1, 2019

Cisco patches persistent Webex vulnerability for a third time

After two previous attempts, Cisco has issued a third patch for a persistent flaw in its Webex platform, which allows privilege escalation attacks on systems running the software.

By Rob Wright • Feb. 28, 2019

MarioNet attack exploits HTML5 to create botnets

Researchers created a new browser-based attack, called MarioNet, that exploits an HTML5 API and can create botnets even after a browser tab is closed or a target navigates away.

By Michael Heller • Feb. 27, 2019

WinRAR bug found and patched after 19 years

A WinRAR bug that affects every version of the app over the past 19 years was discovered and patched. But it's unclear if the millions of the app's users will get the needed fix.

By Michael Heller • Feb. 25, 2019

How does a WordPress SEO malware injection work and how can enterprises prevent it?

Security expert Nick Lewis explains how to prevent WordPress SEO malware injection attacks that rank the attacker's search engine results higher than legitimate webpages.

By Nick Lewis • Feb. 25, 2019

CrowdStrike report says breakout time for threat actors is increasing

CrowdStrike's annual global threat report highlights why speed is critical for cybersecurity defenders. Experts sound off on key findings, including the rise of 'big game hunting.'

By Mekhala Roy • Feb. 21, 2019

Weighing the cost of mitigating Spectre variant 2

Fixes for the Spectre variant 2 vulnerability affect system performance, so some in the tech sector wonder whether they're worth it. Expert Michael Cobb examines that question.

By Michael Cobb • Feb. 21, 2019

ConnectWise plugin flaw exploited in ransomware attacks on MSPs

GandCrab ransomware infected several managed service providers, thanks to an old a ConnectWise manage plugin vulnerability, but a new decryptor tool is offering relief to victims.

By Michael Heller • Feb. 20, 2019

Is a Mirai botnet variant targeting unpatched enterprises?

New variants of popular botnets were found targeting IoT devices by Palo Alto Networks' Unit 42. Discover how these variants differ from their sources and what new risks they pose.

By Nick Lewis • Feb. 20, 2019

What new technique does the Osiris banking Trojan use?

A new Kronos banking Trojan variant was found to use process impersonation to bypass defenses. Learn what this evasion technique is and the threat it poses with Nick Lewis.

By Nick Lewis • Feb. 20, 2019

How does the iPhone phishing scam work?

An iPhone phishing scam leads users to believe malicious incoming calls are from Apple Support. How can enterprises protect their employee against this threat?

By Nick Lewis • Feb. 18, 2019

How do I stop the Vidar malvertising attack?

The Vidar malvertising attack was part of a two-pronged intrusion that included the installation of ransomware in endpoints. How can enterprises protect themselves?

By Nick Lewis • Feb. 18, 2019

Astaroth Trojan returns, abuses antivirus software

Cybereason's Nocturnus Research team has discovered a new strain of the Astaroth Trojan that attacks antivirus software to steal credentials.

By Mekhala Roy • Feb. 15, 2019

How did the Dirty COW exploit get shipped in software?

An exploit code for Dirty COW was accidentally shipped by Cisco with product software. Learn how this code ended up in a software release and what this vulnerability can do.

By Judith Myerson • Feb. 14, 2019

How did Browser Reaper cause browsers to crash?

A Mozilla vulnerability duplicated in the Browser Reaper set of DoS proofs of concept caused Chrome, Firefox and Safari to crash. Learn why and how this occurred.

By Nick Lewis • Feb. 13, 2019

Senators want potential VPN threat investigated by DHS

Two senators called on the Department of Homeland Security to investigate the possibility that VPNs are allowing valuable information to be routed to foreign adversaries.

By Michael Heller • Feb. 12, 2019

Apple releases FaceTime patch and iOS zero-day fixes

New bug fix releases for both iOS and macOS include the anticipated FaceTime patch for the serious eavesdropping flaw in group chats as well as fixes for two iOS zero-days.

By Michael Heller • Feb. 8, 2019

‘SpeakUp’ backdoor Trojan could spell further trouble for Linux servers

Check Point Research explains why SpeakUp, the new Trojan targeting Linux servers, has the potential to unleash more harm and offers pointers on how to defend against such malware.

By Mekhala Roy • Feb. 8, 2019

USB attacks: Big threats to ICS from small devices

USB devices can carry malware that can wreak havoc on industrial control systems. Expert Ernie Hayden explores the history of USB attacks and possible mitigations.

By Ernie Hayden • Feb. 8, 2019

More Ghostscript vulnerabilities, more PostScript problems

Researchers keep finding PostScript interpreter bugs. Find out how a new Ghostscript vulnerability enables remote code execution against web services and Linux desktop users.

By Hanno Böck • Feb. 7, 2019