Threats & Vulnerabilities: Page

Battling nation-state cyberattacks in a federal leadership vacuum

Nation-state cyberattacks could be better fought with a united front. But the U.S. government has failed to find a reliable way to deter or stop attackers.

By Robert Lemos • Feb. 1, 2019

Google planning warnings for lookalike URLs in Chrome

Google is planning to add warnings on lookalike URLs in an ongoing effort to ensure internet users experience useful and clear warnings while using the Chrome browser.

By Michael Heller • Feb. 1, 2019

Facebook and Google exploit Enterprise Certificate loophole on iOS

Both Facebook and Google were found to be exploiting a loophole in Apple's Developer Enterprise Program for iOS with apps used to gather data on users who installed them.

By Michael Heller • Jan. 31, 2019

New DDoS attack technique puts CSPs at risk

Nexusguard found a new DDoS attack technique that targeted CSPs in which attackers used a bit-and-piece approach to inject junk into legitimate traffic and dodge detection.

By Mekhala Roy • Jan. 30, 2019

Major Apple FaceTime bug allows audio eavesdropping

A new major FaceTime bug can allow someone to hear the other party's audio before they answer the call and the issue was reported to Apple more than a week ago.

By Michael Heller • Jan. 29, 2019

Insecure MongoDB databases expose Russian backdoor access

A security researcher found more than 2,000 exposed MongoDB databases that revealed a backdoor-access account operated by the Russian government, according to a report from ZDNet.

By Rob Wright • Jan. 29, 2019

DNS hijack attacks lead to government directive from DHS

Following a string of DNS hijack attacks around the globe, the Department of Homeland Security has directed federal agencies to harden defenses against DNS tampering.

By Michael Heller • Jan. 25, 2019

What are the best ways to prevent a SIM swapping attack?

SIM swapping is on the rise as the use of mobile devices increases. Discover what SIM swaps are, how they work and how they can be mitigated.

By Nick Lewis • Jan. 25, 2019

DNC lawsuit claims Russian hackers attacked again after midterms

A Democratic National Committee lawsuit regarding Russian cyberattacks in the lead-up to the 2016 election now also claims Russia attacked DNC systems after the 2018 midterms.

By Michael Heller • Jan. 22, 2019

Man-in-the-disk attack: How are Android products affected?

Researchers from Check Point announced a new attack at Black Hat 2018 that targets Android devices. Discover how this attack works and how devices should be protected with Nick Lewis.

By Nick Lewis • Jan. 21, 2019

Collection #1 breach data includes 773 million unique emails

Have I Been Pwned added a new trove of 773 million unique emails and 21 million passwords -- known as the Collection #1 breach data -- but there are questions about the freshness of the data.

By Michael Heller • Jan. 18, 2019

Java deserialization attacks: What are they and how do they work?

The TP-Link EAP Controller for Linux was recently found to be vulnerable to attacks. Learn from Judith Myerson what this means for users and how it can be prevented.

By Judith Myerson • Jan. 18, 2019

Ping of death: What is it and how is Apple affected?

An Apple vulnerability recently resurfaced and is targeting Apple devices that are connected to public hotspots. Discover what this vulnerability is and how to protect your devices.

By Judith Myerson • Jan. 17, 2019

Ryuk ransomware poses growing threat to enterprises

Cybersecurity vendors CrowdStrike and FireEye both published new research that shows an increase in Ryuk ransomware attacks on enterprises, which have earned hackers $3.7 million.

By Rob Wright • Jan. 15, 2019

How was a credit card skimmer used to steal data from Newegg?

Researchers believe that malicious JavaScript code was used to steal credit card data from online retailer Newegg. Learn more about this attack with Judith Myerson.

By Judith Myerson • Jan. 15, 2019

Iran implicated in DNS hijacking campaign around the world

FireEye researchers investigating a DNS hijacking campaign against governments and telecom companies said those who are potential targets of Iran should take precautions.

By Michael Heller • Jan. 11, 2019

McAfee casts doubt on Ryuk ransomware connection to North Korea

New research from McAfee refutes the connection between recent Ryuk ransomware attacks and the North Korean government. Instead, it points the finger at cybercriminals.

By Rob Wright • Jan. 10, 2019

Cloud provider blames Ryuk ransomware for Christmas Eve attack

News roundup: Data Resolution claimed the Ryuk ransomware attack on its systems originated from North Korea. Plus, the EU is set to launch 14 open source bug bounties, and more.

By Madelyn Bacon and Casey Clark • Jan. 4, 2019

Tribune Publishing cyberattack raises attribution questions

Malware hit the Tribune Publishing Company and disrupted the publication of several major newspapers, but the nature of the attack and threat actors remain unclear.

By Rob Wright • Jan. 2, 2019

Why dating app security flaws should concern enterprises

Vulnerable dating apps on BYODs pose risks to more than just individual users. Find out what security flaws are common in these apps and what they mean for enterprises.

By Lena Young • Dec. 31, 2018

Malwarebytes: Fileless ransomware an emerging threat for U.S.

A new Malwarebytes report examines Sorebrect, a fileless ransomware threat that's been detected in the U.S. this year, as well as with three other fileless attacks.

By Casey Clark • Dec. 27, 2018

How paradigms shifting can alter the goals of attackers and defenders

The use of disruptive technology is altering the way attackers and defenders set goals for network security. Learn more about the shifting field with Matt Pascucci.

By Matthew Pascucci • Dec. 27, 2018

DOJ indicts two Chinese nationals for APT10 group cyberattacks

The Department of Justice indicted two alleged members of the Chinese state-sponsored hacking group APT10, which hacked managed service providers to steal data from enterprises.

By Michael Heller • Dec. 21, 2018

Microsoft patches Internet Explorer zero-day bug under attack

News roundup: Microsoft issues an emergency patch for an Internet Explorer bug exploited in the wild. Plus, authorities indict three individuals for 'stresser' services, and more.

By Rob Wright • Dec. 21, 2018

How is SamSam ransomware using a manual attack process?

Sophos researchers believe the SamSam ransomware campaign could be the work of one or a few threat actors using manual techniques. Learn how it works and if recovery is possible.

By Nick Lewis • Dec. 21, 2018