Threats & Vulnerabilities: Page

How bad is the iBoot source code leak for Apple security?

The iBoot source code on Apple devices was leaked to the public on GitHub. Expert Michael Cobb explains how it happened and what the implications are for iOS security.

By Michael Cobb • June 4, 2018

Business email compromise moves closer to advanced threats

The sophisticated techniques used in BEC scams differ from other email fraud in the steps taken to construct the criminal campaign. Here's how to stop these APT-style attacks.

By Adam Rice • June 1, 2018

Yokogawa Stardom vulnerability leaves hardcoded creds in ICS controllers

A Yokogawa Stardom vulnerability leaves industrial control systems in critical infrastructure around the world at risk because of hardcoded credentials in the software.

By Michael Heller • June 1, 2018

Cybercrime study: Growing economic ecosystem spells trouble

New research shows that cybercriminals are gaining momentum with connected infrastructure and collectively earning billions annually from a cybercrime economy. Now what?

By Kathleen Richards • June 1, 2018

SS7 vulnerabilities enable breach of major cellular provider

News roundup: A major cellular network may have been compromised by exploiting SS7 vulnerabilities, according to reports. Plus, Kaspersky's lawsuits have been dismissed, and more.

By Madelyn Bacon • June 1, 2018

Yahoo hacker sentenced to five years in prison for massive breach

One of four Yahoo hackers was sentenced to five years in prison for his role in the massive 2014 breach, which included accessing millions of sensitive email accounts.

By Peter Loshin • May 31, 2018

Dragos’ Robert Lee discusses latest ICS threats, hacking back

In part two of this interview from RSA Conference 2018, Dragos CEO Robert Lee discusses the latest threats to industrial control systems and how those threats can be exaggerated.

By Rob Wright • May 31, 2018

How has a Broadcom flaw affected the Lenovo ThinkPad?

A previously disclosed flaw found in Broadcom's Wi-Fi controller chips is now believed to affect the Lenovo ThinkPad. Learn how this vulnerability works with expert Judith Myerson.

By Judith Myerson • May 31, 2018

How do BGP flaws affect Quagga routing software?

Multiple Border Gateway Protocol vulnerabilities were found impacting security in the Quagga routing software. Expert Judith Myerson explains how these flaws impact systems.

By Judith Myerson • May 31, 2018

Feds issue new alert on North Korean hacking campaigns

The U.S. government claims two notable malware campaigns are the work of North Korean nation-state hacking group Hidden Cobra, also known as the Lazarus Group.

By Rob Wright • May 30, 2018

How are Linear eMerge E3 systems vulnerable to attacks?

ICS-CERT issued a warning about a new vulnerability in Nortek Linear eMerge E3 products. Discover what this vulnerability is and how it affects access control for enterprises.

By Judith Myerson • May 30, 2018

Creators of Trisis malware have expanded their ICS attacks

News roundup: Dragos researchers say the group behind the Trisis malware has expanded its ICS attacks. Plus, Roaming Mantis malware now targets iOS devices, and more.

By Madelyn Bacon • May 25, 2018

VPNFilter malware infects 500,000 devices for massive Russian botnet

New malware, dubbed 'VPNFilter' by Cisco Talos, infects 500,000 devices and triggers action from Justice Department, which seized and sinkholed the botnet's domain.

By Peter Loshin • May 24, 2018

How the Meltdown and Spectre vulnerabilities impact security

The Meltdown and Spectre vulnerabilities impact the physical and hardware security of systems, making them extremely difficult to detect. Learn how to prevent these attacks with Nick Lewis.

By Nick Lewis • May 24, 2018

Wicked botnet: Another Mirai variant targets connected devices

Fortinet researchers uncovered a new variant of the Mirai malware, known as the Wicked botnet, which targets vulnerable IoT devices and uses multiple existing exploits.

By Madelyn Bacon • May 23, 2018

Newly disclosed Spectre variant 4 brings more side channel concerns

A new Spectre vulnerability was disclosed this week, adding to concerns about side channel attacks exploiting speculative execution in modern processors.

By Rob Wright • May 22, 2018

North Korean hackers linked to Google Play spyware

The 'Sun Team' group of North Korean hackers placed malicious apps in the Google Play store to target defectors and steal personal data such as photos, contacts and SMS messages.

By Peter Loshin • May 22, 2018

Telegrab malware threatens Telegram desktop users

News roundup: Telegrab malware enables hackers to grab encryption keys and browser credentials from Telegram sessions. Plus, DHS released its new cybersecurity strategy, and more.

By Madelyn Bacon • May 18, 2018

How does the Terror exploit kit spread through malicious ads

Zscaler recently discovered a malvertising campaign that spreads the Terror exploit kit through malicious ads. Discover more about the threat with expert Nick Lewis.

By Nick Lewis • May 18, 2018

Securus hack exposes law enforcement customers of location tracking

Following news that it provides near real-time location data to law enforcement without warrants, a Securus hack exposed information on those law enforcement customers.

By Michael Heller • May 17, 2018

Are Meltdown and Spectre real vulnerabilities or mere flaws?

There's been some debate over whether Meltdown and Spectre are true vulnerabilities. Expert Michael Cobb discusses what qualifies as a vulnerability and if these two make the cut.

By Michael Cobb • May 17, 2018

Vault 7 leak suspect is a former CIA employee already in custody

The U.S. government has identified a man already in custody on unrelated charges as the suspect in the Vault 7 leak, but it is unclear how much evidence supports the case.

By Michael Heller • May 16, 2018

Illumio: Subtle data manipulation attacks pose serious threats

Illumio CTO P.J. Kirner discusses the threat of data manipulation and explains why subtle, hard to detect attacks could have devastating effects on enterprises.

By Rob Wright • May 16, 2018

Efail disclosure troubles highlight branded vulnerability issues

The Efail disclosure process was one day away from completion, but attempts to generate hype for the vulnerabilities led to details leaking earlier than researchers intended.

By Michael Heller • May 16, 2018

How does a DDE attack exploit Microsoft Word functionality?

The SANS Internet Storm Center discovered a DDE attack spreading Locky ransomware through Microsoft Word. Learn what a DDE attack is and how to mitigate it with expert Nick Lewis.

By Nick Lewis • May 16, 2018