Threats & Vulnerabilities: Page
-
Brand Experience Team/TechTarget
What is a watering hole attack?
A watering hole attack is a security exploit in which the attacker seeks to compromise a specific group of end users by infecting websites that members of the group are known to visit.
By Madelyn Bacon, Gavin Wright, Mary Shacklett • Feb. 28, 2025 -
Brand Experience Team/TechTarget
FBI: Lazarus Group behind $1.5 billion Bybit heist
Researchers say the heist, in which North Korean state-sponsored hackers stole funds from a cold wallet, is the biggest theft in the history of the cryptocurrency industry.
By Arielle Waldman • Feb. 27, 2025 -
Brand Experience Team/TechTarget
What is domain generation algorithm (DGA)?
A domain generation algorithm (DGA) is a program that generates a large list of domain names. DGAs provide malware with new domains to evade security countermeasures.
By Nick Barney, Alexander Gillis, Sharon Shea • Feb. 27, 2025 -
Brand Experience Team/TechTarget
CrowdStrike: China hacking has reached ‘inflection point’
In its 2025 Global Threat Report, CrowdStrike observed an increase in China's cyber capabilities, with a focus on espionage and 'pre-positioning' itself in critical environments.
By Alexander Culafi • Feb. 27, 2025 -
Brand Experience Team/TechTarget
NCC Group tracks alarming ransomware surge in January
NCC Group found ransomware activity in January surpassed previous monthly highs with 590 attacks, as one notorious gang experienced a notable resurgence.
By Arielle Waldman • Feb. 26, 2025 -
Brand Experience Team/TechTarget
Black Basta ransomware leak sheds light on targets, tactics
VulnCheck found the ransomware gang targeted CVEs in popular enterprise products from Microsoft, Citrix, Cisco, Fortinet, Palo Alto Networks, Confluence Atlassian and more.
By Alexander Culafi • Feb. 25, 2025 -
Brand Experience Team/TechTarget
Dragos: Ransomware attacks against industrial orgs up 87%
Ransomware attacks continue to be a major pain point for industrial organizations, as the sector has historically struggled with vulnerability management.
By Alexander Culafi • Feb. 25, 2025 -
Brand Experience Team/TechTarget
What is red teaming?
Red teaming is the practice of rigorously challenging plans, policies, systems and assumptions with an adversarial approach.
By Paul Kirvan • Feb. 24, 2025 -
Brand Experience Team/TechTarget
Palo Alto Networks vulnerabilities exploited in chained attack
The cybersecurity vendor urges customers to take immediate action to mitigate recently disclosed vulnerabilities that are being actively exploited in the wild.
By Arielle Waldman • Feb. 21, 2025 -
Brand Experience Team/TechTarget
Podcast
Risk & Repeat: Salt Typhoon hasn’t stopped hacking
Although the Salt Typhoon telecom breaches from last year appear to have been remediated, the Chinese state-sponsored threat group continues to target critical organizations.
By Alexander Culafi • Feb. 20, 2025 -
Brand Experience Team/TechTarget
CISA, FBI warn of Ghost/Cring ransomware attacks
Ghost is a China-based financially motivated ransomware group that has launched attacks against organizations in more than 70 countries -- including its own.
By Alexander Culafi • Feb. 20, 2025 -
Brand Experience Team/TechTarget
What is an attack vector?
An attack vector is a path or means by which an attacker or hacker can gain access to a computer or network server to deliver a payload or malicious outcome.
By Scott Robinson , Mary Shacklett • Feb. 19, 2025 -
Brand Experience Team/TechTarget
What is email spoofing?
Email spoofing is a form of cyber attack in which a hacker sends an email that has been manipulated to seem as if it originated from a trusted source.
By Peter Loshin, Scott Robinson • Feb. 19, 2025 -
Brand Experience Team/TechTarget
Palo Alto Networks PAN-OS vulnerability exploited in the wild
Palo Alto Networks says threat actors used a publicly available PoC exploit in attack attempts against firewall customers with PAN-OS management interfaces exposed to the internet.
By Alexander Culafi • Feb. 18, 2025 -
Brand Experience Team/TechTarget
What is a botnet?
A botnet is a collection of internet-connected devices -- including PCs, servers, mobile devices and internet of things (IoT) devices -- infected and controlled by a common type of malware, often unbeknownst to their owners.
By Ben Lutkevich, Katie Terrell Hanna, Scott Robinson • Feb. 18, 2025 -
Brand Experience Team/TechTarget
What are social engineering attacks?
Social engineering is an attack vector that relies heavily on human interaction and often involves psychological manipulation of people into breaking normal security procedures and best practices to gain unauthorized access.
By Paul Kirvan, Madelyn Bacon • Feb. 18, 2025 -
Brand Experience Team/TechTarget
Chinese companies on DoD CMC list: Tech giants on the list
Several Chinese tech giants including Huawei, Tencent and CATL are now on the U.S. Chinese Military Companies list due to security concerns.
By Kinza Yasar • Feb. 18, 2025 -
Brand Experience Team/TechTarget
Salt Typhoon compromises telecom providers’ Cisco devices
Salt Typhoon's latest campaign exploits older vulnerabilities in Cisco edge devices to gain access to the networks of several telecom companies, including two based in the U.S.
By Alexander Culafi • Feb. 13, 2025 -
Brand Experience Team/TechTarget
What is a denial-of-service attack?
A denial-of-service (DoS) attack is a security threat that occurs when an attacker makes it impossible for legitimate users to access computer systems, networks, services or other IT resources.
By Peter Loshin, Kevin Ferguson, Scott Robinson • Feb. 13, 2025 -
Brand Experience Team/TechTarget
What is cyber hijacking?
Cyber hijacking, or computer hijacking, is a type of network security attack in which the threat actor takes control of computer systems, software programs and network communications.
By Scott Robinson • Feb. 12, 2025 -
Brand Experience Team/TechTarget
Apple zero day used in ‘extremely sophisticated attack’
CVE-2025-24200 is a zero-day vulnerability that bypasses Apple's USB Restricted Mode in iPhones and iPads and was exploited in the wild against 'specific targeted individuals.'
By Alexander Culafi • Feb. 11, 2025 -
Brand Experience Team/TechTarget
Trimble Cityworks zero-day flaw under attack, patch now
CVE-2025-0994 is a high-severity deserialization vulnerability that enables remote code execution in unpatched versions of Cityworks enterprise asset management software.
By Alexander Culafi • Feb. 10, 2025 -
Brand Experience Team/TechTarget
Ransomware hits healthcare, critical services in January
Ransomware attacks against healthcare organizations in January reflect an increasing need for threat actors to adapt and get aggressive as defenders improve.
By Alexander Culafi • Feb. 7, 2025 -
Brand Experience Team/TechTarget
Zyxel won’t patch end-of-life routers against zero-day attacks
Networking hardware vendor Zyxel has no plans to patch multiple end-of-life routers against new zero-day flaws and advises customers to replace affected devices entirely.
By Alexander Culafi • Feb. 5, 2025 -
Brand Experience Team/TechTarget
AMD, Google disclose Zen processor microcode vulnerability
AMD said CVE-2024-56161, which first leaked last month, requires an attacker to have local administrator privileges as well as developed and executed malicious microcode.
By Alexander Culafi • Feb. 4, 2025
Previous
