Threats & Vulnerabilities: Page

Recorded Future names Tessa88 suspect in LinkedIn, Myspace breaches

Researchers at Recorded Future identified the individual behind the notorious Tessa88 hacker handle, but it's unclear what role he played in the LinkedIn and Myspace breaches.

By Rob Wright • Nov. 20, 2018

Can a D-Link router vulnerability threaten bank customers?

A D-Link router vulnerability was used to send banking users to a fake site in order to steal their information. Learn more about this vulnerability with expert Judith Myerson.

By Judith Myerson • Nov. 20, 2018

How does a Bluetooth vulnerability enable validation attacks?

Bluetooth devices might be at risk after a new Bluetooth vulnerability was found targeting firmware and operating system software drivers. Learn how it works and can be mitigated.

By Judith Myerson • Nov. 19, 2018

Firefox Monitor offers breach alerts on visited websites

The promised integration with Have I Been Pwned is expanding in Firefox Monitor with new breach alerts when a user visits a recently compromised website.

By Michael Heller • Nov. 16, 2018

Google BGP route leak was accidental, not hijacking

Despite early speculation, experts concluded the BGP route leak that sent Google traffic through China and Russia was due to an accidental misconfiguration and not malicious activity.

By Michael Heller • Nov. 16, 2018

After 2015 OPM data breach, agency failed to update security

News roundup: Three years after the OPM data breach, the agency still hasn't implemented basic security. Plus, seven new Meltdown, Spectre attacks were uncovered, and more.

By Madelyn Bacon • Nov. 16, 2018

How is the Trezor cryptocurrency online wallet under attack?

A phishing campaign targeting Trezor wallets may have poisoned DNS or hijacked BGP to gain access. Learn how the attack worked and how to mitigate it with expert Nick Lewis.

By Nick Lewis • Nov. 15, 2018

Cybercrime agreement signed by 50 nations, not U.S., China and Russia

An international cybercrime agreement was signed by 50 nations and 150 companies in Paris, but the U.S., China and Russia were not part of the accord.

By Michael Heller • Nov. 14, 2018

SSD encryption failures made worse by BitLocker settings

Researchers discover major manufacturers poorly implemented SSD encryption, allowing easy access to data, and Microsoft BitLocker made the issue worse.

By Michael Heller • Nov. 12, 2018

How does new MacOS malware target users through chat?

New malware targets cryptocurrency investors through MacOS and chat platforms were recently discovered. Learn how OSX.Dummy malware works and what users can do to spot the attack.

By Nick Lewis • Nov. 12, 2018

New spam botnet infects over 100,000 home routers

News roundup: A new spam botnet infected over 100,000 home routers through a UPnP vulnerability, according to researchers. Plus, HSBC Bank reported a data breach, and more.

By Madelyn Bacon • Nov. 9, 2018

How is Plead malware used for cyberespionage attacks?

Cyberespionage hackers have used stolen digital certificates to steal data. Expert Michael Cobb explains how hackers sign Plead malware to conduct these attacks.

By Michael Cobb • Nov. 9, 2018

U.S. Cyber Command malware samples to be logged in VirusTotal

The Cyber National Mission Force will share unclassified U.S. Cyber Command malware samples to VirusTotal and one expert hopes there will be more action taken to help researchers.

By Michael Heller • Nov. 8, 2018

What is behind the growing trend of BEC attacks?

BEC attacks cost over $676 million in 2017, according to the FBI's Internet Crime Report. Learn how to recognize possible BEC attacks from expert Michael Cobb.

By Michael Cobb • Nov. 8, 2018

How does site isolation defend against Spectre vulnerabilities?

Spectre exploits how processors manage performance-enhancing features. Expert Michael Cobb explains Google Chrome's initiative to use site isolation as a defense mechanism.

By Michael Cobb • Nov. 7, 2018

PortSmash side-channel attack targets Intel Hyper-Threading

The latest side-channel attack against Intel chips, known as PortSmash, targets Hyper-Threading in order to steal data, such as private OpenSSL keys from a TLS server.

By Michael Heller • Nov. 6, 2018

How deception technologies improve threat hunting, response

Deception tech tools enable more effective threat hunting and incident response. Learn how these tools can give security pros an edge in defending their company systems and data.

By Dave Shackleford • Nov. 5, 2018

As PHP v5 nears its end, enterprises face serious threats

The majority of websites still use the outdated PHP v5, according to recent data, causing concern over the fact that it will stop receiving security support at the end of the year.

By Madelyn Bacon • Nov. 5, 2018

Bleedingbit vulnerabilities put Wi-Fi access points at risk

Armis researchers discovered two chip-level Bluetooth vulnerabilities -- dubbed Bleedingbit -- that could allow pseudo-remote code execution on wireless access points.

By Michael Heller • Nov. 2, 2018

SamSam ransomware campaigns continue to target U.S. in 2018

News roundup: SamSam ransomware targeted 67 organizations in 2018, according to research. Plus, Equifax is sending its breach victims to Experian for credit monitoring, and more.

By Madelyn Bacon • Nov. 2, 2018

Kraken ransomware gets packaged into Fallout EK

Researchers found Kraken ransomware has become more popular after being packaged in the Fallout exploit kit and becoming part of an affiliate program.

By Michael Heller • Nov. 2, 2018

Enterprises should reconsider SMS-based 2FA use after breach

A Reddit breach was triggered by threat actors intercepting SMS messages used to authenticate employees to access sensitive data. Learn why enterprises should reconsider SMS for 2FA.

By Nick Lewis • Oct. 30, 2018

Settlement in Yahoo data breach leaves company to pay $50M

News roundup: The Yahoo data breach will cost the company another $50 million in a settlement deal. Plus, Check Point acquired cloud security company Dome9, and more.

By Madelyn Bacon • Oct. 26, 2018

WebExec vulnerability leaves Webex open to insider attacks

A remote code execution flaw in Cisco Webex -- called WebExec -- could be an easy vector for insider attacks, and the researchers who found it say it's easier to exploit than detect.

By Michael Heller • Oct. 26, 2018

Malwarebytes cybercrime report shows increase in attacks on businesses

Malwarebytes' report, 'Cybercrime Tactics and Techniques Q3 2018,' highlights how businesses became the focus of cyberattacks versus consumers over the past three months.

By Casey Clark • Oct. 25, 2018