Threats & Vulnerabilities: Page

LifeLock vulnerability exposed user email addresses to public

News roundup: A LifeLock vulnerability exposed the email addresses of millions of customers. Plus, Amazon's Rekognition misidentified 28 members of Congress as criminals, and more.

By Madelyn Bacon • July 27, 2018

Senator wants government to stop Adobe Flash use

Senator Ron Wyden wrote a letter to multiple government agencies advocating that the entire U.S. government stop Adobe Flash use on all systems due to security risks.

By Michael Heller • July 27, 2018

Ponemon: Mega breaches, data breach costs on the rise

The Ponemon Institute's '2018 Cost of a Data Breach Study' details a rise in data breaches with a look at mega breaches and why U.S. companies experience the greatest loss.

By Casey Clark • July 26, 2018

How does SirenJack put emergency warning systems at risk?

Bastille researchers created the SirenJack proof of concept to show how a vulnerability could put San Francisco's emergency warning system at risk. Judith Myerson explains how it works.

By Judith Myerson • July 26, 2018

DHS details electrical grid attacks by Russian agents

For the first time, DHS has offered more detailed and unclassified information about electrical grid attacks carried out by Russian hackers and the dangers to U.S. infrastructure.

By Michael Heller • July 26, 2018

How is Apple iOS 11 affected by a QR code vulnerability?

A QR code vulnerability was recently discovered in the Apple iOS 11 camera app. Learn how an attacker could exploit it and how to avoid the issue with Judith Myerson.

By Judith Myerson • July 25, 2018

Bouncy Castle keystore: How are files vulnerable to brute force?

BKS files are being exposed to hash collisions, enabling hackers to use brute force attacks against C# and Java applications. Learn how this occurs and possible solutions with Judith Myerson.

By Judith Myerson • July 24, 2018

How did a Navarino Infinity flaw expose unauthenticated scripts?

Navarino Infinity, a satellite communication system, found and fixed a flaw that exposed an unauthenticated script. Discover what threats this flaw enabled with Judith Myerson.

By Judith Myerson • July 23, 2018

Critical Cisco vulnerabilities patched in Policy Suite

News roundup: Critical Cisco vulnerabilities in Policy Suite products were patched this week. Plus, Venmo's API is set to public, exposing a trove of customer data, and more.

By Madelyn Bacon • July 20, 2018

Cloud misconfigurations can be caused by too many admins

Cloud misconfigurations have reached a point where sensitive data can't be protected with manual control, says BetterCloud's David Politis. And part of the issue is too many admins.

By Michael Heller • July 20, 2018

Trojan.AndroidOS.Loapi: What is this jack-of-all-trades malware?

Kaspersky researchers found a new Android malware that can physically harm phones. Learn how this works and the steps to mitigate the attack with expert Nick Lewis.

By Nick Lewis • July 20, 2018

Vendor admits election systems included remote software

A vendor admitted to compromising its election system security by installing remote access software on systems over the span of six years, but claims to have stopped the practice.

By Michael Heller • July 19, 2018

Domain fronting: Why cloud providers are concerned about it

Domain fronting is a popular way to bypass censorship controls, but cloud providers like AWS and Google have outlawed its use. Expert Michael Cobb explains why.

By Michael Cobb • July 19, 2018

Zealot campaign: How is the Apache Struts vulnerability used?

The Zealot campaign discovered by F5 Networks uses the same Apache Struts vulnerability exploited in the Equifax breach. Learn how else it performs cryptomining with Nick Lewis.

By Nick Lewis • July 19, 2018

Digimine bot: How does social media influence cryptojacking?

Facebook Messenger is being used to reach more victims with a cryptojacking bot that Trend Micro researchers named Digimine. Learn how this bot works with expert Nick Lewis.

By Nick Lewis • July 18, 2018

X-Agent malware lurked on DNC systems for months after hack

The indictment of Russian intelligence officers accused of hacking the DNC revealed a troubling timeline, including the X-Agent malware lurking on DNC systems for months.

By Michael Heller • July 17, 2018

Spider ransomware: How do ransomware attacks differ?

Spider ransomware has been found spreading malicious files via a phishing campaign that gives victims a 96-hour deadline. Learn how this attack is similar to past attacks with Nick Lewis.

By Nick Lewis • July 17, 2018

Android vulnerability: How can users mitigate Janus malware?

The Janus vulnerability was found injecting malicious code into reputable Android apps. Once injected, users' endpoints become infected. Learn how to prevent this with expert Nick Lewis.

By Nick Lewis • July 16, 2018

Russian intelligence officers indicted for DNC hack

A grand jury for special counsel Robert Mueller's election-interference investigation indicted 12 Russian intelligence officers for crimes related to the DNC and DCCC hacks.

By Rob Wright • July 13, 2018

New Spectre variants earn $100,000 bounty from Intel

Researchers discovered two new Spectre variants that can be used to bypass protections and attack systems and earned $100,000 in bug bounties from Intel.

By Michael Heller • July 13, 2018

Ticketmaster breach part of worldwide card-skimming campaign

News roundup: The Ticketmaster breach was part of a massive digital credit card-skimming campaign. Plus, the U.K. fined Facebook over the Cambridge Analytica scandal, and more.

By Madelyn Bacon • July 13, 2018

Drupalgeddon 2.0: Why is this vulnerability highly critical?

A recently discovered Drupal vulnerability in its open source CMS allowed attackers to control websites. Learn how almost one million sites were affected with Michael Cobb.

By Michael Cobb • July 13, 2018

How can cryptojacking attacks in Chrome be stopped?

Google instituted an aggressive ban on all cryptomining extensions for Chrome after cryptojacking attacks started to become more common. Learn how the ban works with Michael Cobb.

By Michael Cobb • July 12, 2018

GandCrab ransomware adds NSA tools for faster spreading

NSA exploit tools have already been used in high-profile malware. And now, GandCrab ransomware v4 has added the NSA's SMB exploit in order to spread faster.

By Michael Heller • July 11, 2018

Stolen digital certificates used in Plead malware spread

Researchers found the spread of Plead malware was aided by the use of stolen digital certificates, making the software appear legitimate and hiding the true nature of the attacks.

By Michael Heller • July 10, 2018