Threats & Vulnerabilities: Page

Researchers discover Android apps spying on users’ screens

News roundup: Academic researchers discover Android apps secretly recording and sharing video of users' screens. Plus, an NSO Group employee lands in hot water, and more.

By Rob Wright • July 6, 2018

Exactis leak exposes database with 340 million records

Experts said the Exactis leak needs to be treated as a learning moment for defining identity online after the marketing firm exposed data on 230 million adults and 110 million businesses.

By Michael Heller • June 29, 2018

McAfee details rise in blockchain threats, cryptocurrency attacks

McAfee's new 'Blockchain Threat Report' charts a dramatic rise in cryptomining malware and details four major attack vectors for cryptocurrency-related threats.

By Casey Clark • June 29, 2018

Microsoft CredSSP: How was it exploited by CVE-2018-0886?

The CVE-2018-0886 vulnerability found within Microsoft's CredSSP was recently patched. Discover what this vulnerability is and how it affects the CredSSP protocol with Judith Myerson.

By Judith Myerson • June 29, 2018

Insider threats: Preventing intellectual property theft

IP theft is often committed by insiders or disgruntled employees who feel entitled to information. Peter Sullivan explains the threat and how to prevent these insider attacks.

By Peter Sullivan • June 28, 2018

TLBleed attack can extract signing keys, but exploit is difficult

A new side-channel attack on Intel chips, named TLBleed, can extract signing keys. But the researcher who discovered it said users shouldn't worry, because it's not the next Spectre.

By Michael Heller • June 27, 2018

How are air-gapped computers put at risk by the Mosquito attack?

Researchers recently discovered Mosquito -- an air-gapped attack that bites computers to put air-gapped networks at risk. Discover the logistics of this technique with Judith Myerson.

By Judith Myerson • June 27, 2018

How did the Panera Bread website expose customers?

Panera Bread website users were put at risk after a security researcher discovered a vulnerability relating to a lack of authentication for their publicly available API endpoint.

By Judith Myerson • June 25, 2018

Unprotected Firebase databases leaked over 100 million records

Android and iOS mobile apps that use unprotected Firebase databases leaked over 100 million records that include PHI, financial records and authentication information.

By Madelyn Bacon • June 22, 2018

China-based Thrip hacking group targets U.S. telecoms

News roundup: China-based Thrip hacking group used legitimate tools to attack companies in the U.S. and Southeast Asia. Plus, election officials didn't know about hacks, and more.

By Madelyn Bacon • June 22, 2018

Accused CIA leaker charged with stealing government property

The DOJ has officially charged the accused CIA leaker, Joshua Schulte, with theft of government property and gathering national defense information in the Vault 7 case.

By Michael Heller • June 21, 2018

Constant offensive cyberattacks approved by Pentagon

The Pentagon reportedly approved the use of offensive cyberattacks by the U.S. Cyber Command, and one expert said enterprises should be ready to handle the 'return fire.'

By Michael Heller • June 20, 2018

PyRoMineIoT cryptojacker uses NSA exploit to spread

The latest malware threat based on the EternalRomance NSA exploit is PyRoMineIoT, a cryptojacker infecting IoT devices. But experts said the NSA shouldn't be held responsible for the damages.

By Michael Heller • June 18, 2018

EU institutes Kaspersky ban, calls software ‘malicious’

News roundup: Following a vote by the European Parliament to implement a Kaspersky ban in the EU, Kaspersky announced it would halt ties with the No More Ransom project and Europol.

By Madelyn Bacon • June 15, 2018

FBI fights business email compromise with global crackdown

U.S. federal agencies worked with international law enforcement in Operation Wire Wire to find and prosecute alleged cybercriminals conducting business-email-compromise scams.

By Kathleen Richards • June 15, 2018

North Korea hacking threat still looms despite summit

Despite a summit between President Trump and North Korean leader Kim Jong Un, the threat of North Korean hacking and cyberespionage still looms large, according to experts.

By Rob Wright • June 13, 2018

Scarab ransomware: How do botnets alter ransomware threats?

The use of botnets to spread Scarab ransomware intensifies the threat for enterprises. Discover the best way to respond to such a threat and protect data with Nick Lewis.

By Nick Lewis • June 13, 2018

Fake WhatsApp app: How can counterfeit apps be avoided?

After a fake WhatsApp app was discovered in the Google Play Store, users are questioning what can be done to avoid counterfeit apps. Learn several techniques with Nick Lewis.

By Nick Lewis • June 12, 2018

AVGater vulnerability: How are antivirus products impacted?

A security researcher recently discovered a new vulnerability -- the AVGater vulnerability -- that puts antivirus products at risk. Discover how this vulnerability works with Nick Lewis.

By Nick Lewis • June 11, 2018

New MalwareTech indictment adds four more charges

The U.S. government added four new charges against Marcus Hutchins in the MalwareTech indictment, but questions have surfaced about the legal standing of the new charges.

By Michael Heller • June 8, 2018

Apple plans to disable Facebook web tracking capabilities

News roundup: Apple wants to protect its users from Facebook web tracking with the next version of Safari. Plus, genealogy website MyHeritage suffers data breach, and more.

By Madelyn Bacon • June 8, 2018

How can domain generation algorithms be used to bypass ad blockers?

An ad network used domain generation algorithms to bypass ad blockers and launch cryptomining malware. Expert Michael Cobb explains how and the best way to prevent these attacks.

By Michael Cobb • June 8, 2018

Apple iOS 12 USB Restricted Mode to foil thieves, law enforcement

A rumored security feature, USB Restricted Mode, is making its premiere in Apple's iOS 12 and will protect users from brute-force passcode attacks by thieves and law enforcement alike.

By Michael Heller • June 6, 2018

How did cryptomining malware exploit a Telegram vulnerability?

Hackers were able to exploit a Telegram vulnerability to launch cryptomining malware. Expert Michael Cobb explains how they were able to do so and how to prevent similar attacks.

By Michael Cobb • June 6, 2018

What risks do untrusted certificates pose to enterprises?

Researchers found that untrusted certificates are still used on many major websites. Expert Michael Cobb discusses the security risks of sticking with these certificates.

By Michael Cobb • June 5, 2018