Threats & Vulnerabilities: Page

Ticketmaster breach: How did this card skimming attack work?

The hacking group Magecart was recently found to have run a card skimming campaign that put customer information at risk. Learn how this attack worked from Nick Lewis.

By Nick Lewis • Dec. 20, 2018

GandCrab ransomware: How does it differ from previous versions?

A new version of GandCrab was discovered by researchers in July 2018 and involves the use of legacy systems. Learn how this version differs and who is at risk with Nick Lewis.

By Nick Lewis • Dec. 19, 2018

Huawei bans set to continue, despite lack of supporting evidence

While the number of countries with Huawei bans in place grows and more issue warnings, a German investigation found no evidence of spying to support the fear.

By Michael Heller • Dec. 18, 2018

Kronos banking Trojan: How does the new variant compare?

Proofpoint researchers found a Kronos variant after it targeted victims in Germany, Japan and Poland. Learn how this variant compares to the original banking Trojan with Nick Lewis.

By Nick Lewis • Dec. 17, 2018

Facebook API bug exposed photos of 6.8 million users

GDPR regulators are already investigating a new Facebook API bug the social media giant announced Friday that might have exposed photos belonging to up to 6.8 million users.

By Michael Heller • Dec. 14, 2018

Mozilla distrusts all Symantec certificates with Firefox 64 release

News roundup: Mozilla finally removes trust for Symantec certificates with Firefox 64. Plus, Supermicro's investigation challenges Bloomberg Businessweek's report, and more.

By Rob Wright • Dec. 14, 2018

How does the new Dharma Ransomware variant work?

Brrr ransomware, a Dharma variant, was found adding malicious extensions to encrypted files. Discover how this is possible and how this attack can be mitigated with Judith Myerson.

By Judith Myerson • Dec. 14, 2018

Project Zero finds Logitech Options app critically flawed

Tavis Ormandy of Google's Project Zero discovered a serious authentication vulnerability in Logitech's Options application, but the peripheral device maker has yet to address the flaw.

By Hanno Böck • Dec. 13, 2018

Operation Sharpshooter targets infrastructure around the world

Operation Sharpshooter is a recently discovered global cyberattack campaign targeting critical infrastructure organizations, including nuclear, defense and financial companies.

By Michael Heller • Dec. 13, 2018

Why is preloading HTTP Strict Transport Security risky?

Despite being designed to improve security, infosec experts have warned against preloading the HSTS protocol. Learn about the risks of preloaded HSTS with Judith Myerson.

By Judith Myerson • Dec. 13, 2018

How a flaw in Apple DEP misuses an MDM server

Hackers are able to enroll their devices in an organization's MDM server via a flaw in Apple DEP. Expert Michael Cobb explains how hackers conduct these attacks.

By Michael Cobb • Dec. 13, 2018

Equifax breach report highlights multiple security failures

An Equifax breach report, based on a government investigation, blamed the incident on multiple security failures and concluded the breach was preventable.

By Michael Heller • Dec. 12, 2018

FragmentSmack: How is this denial-of-service exploited?

FragmentSmack, a DDoS vulnerability first discovered in Linux, affects Windows as well as nearly 90 Cisco products. Discover how it can be exploited with Judith Myerson.

By Judith Myerson • Dec. 11, 2018

How did WhatsApp vulnerabilities get around encryption?

WhatsApp vulnerabilities can enable hackers to bypass end-to-end encryption and spoof messages. Expert Michael Cobb explains how these attacks work and how to prevent them.

By Michael Cobb • Dec. 7, 2018

NRCC email breach confirmed eight months later

A security company was brought in to investigate a National Republican Congressional Committee breach from April, but little is known about the NRCC email theft.

By Michael Heller • Dec. 6, 2018

NSO Group’s Pegasus spyware linked to Saudi journalist death

Soon after the Pegasus spyware was linked to the death of a Mexican journalist, a new lawsuit alleged the NSO Group and its spyware were also linked to the death of a Saudi journalist.

By Michael Heller • Dec. 6, 2018

How do L1TF vulnerabilities compare to Spectre?

Foreshadow, a set of newly discovered L1TF vulnerabilities, exploits Intel processors via side-channel attacks. Learn about L1TF and its variations from expert Michael Cobb.

By Michael Cobb • Dec. 4, 2018

Marriott discloses Starwood data breach affecting 500 million guests

Marriott International admitted to a Starwood data breach that began in 2014 and affects about 500 million customers. Experts are unsure about the GDPR implications.

By Michael Heller • Nov. 30, 2018

Why U.S. election security needs an immediate overhaul

There's no evidence that threat actors have been able to manipulate or change vote counts in our elections, but Kevin McDonald says that doesn't mean it can't -- or won't -- happen.

By Kevin McDonald • Nov. 30, 2018

SamSam ransomware actors charged, sanctioned by US government

The FBI indicted two threat actors involved with the SamSam ransomware attacks while the US Treasury sanctioned two others for their role in exchanging Bitcoin earned from attacks.

By Michael Heller • Nov. 29, 2018

Botnet takedown snares 3ve, Methbot ad fraud campaigns

The Justice Department indicted eight individuals accused of running major ad fraud campaigns, including the 3ve botnet, which generated millions of dollars in fake ad revenue.

By Rob Wright • Nov. 28, 2018

How did the Emotet banking Trojan lead to a rise in attacks?

A report on cybercrime shows a rise in banking Trojans, such as Emotet, targeting businesses over consumers. Malwarebytes' Adam Kujawa shares his thoughts on what's behind this shift.

By Casey Clark • Nov. 28, 2018

How bring-your-own-land attacks are challenging enterprises

FireEye researchers developed a new technique called bring your own land, which involves attackers creating their own tools. Discover more about how this works with Nick Lewis.

By Nick Lewis • Nov. 27, 2018

How was a MikroTik router hack used to hijack traffic?

Qihoo 360 Netlab researchers found that TZSP traffic was being redirected from vulnerable routers. Learn what this type of traffic is and how this attack is possible.

By Judith Myerson • Nov. 23, 2018

How was a black box attack used to exploit ATM vulnerabilities?

Researchers from Positive Technologies found flaws affecting NCR ATMs. Discover how these ATM vulnerabilities work and how a patch can mitigate this attack.

By Judith Myerson • Nov. 22, 2018