Threats & Vulnerabilities: Page

Nuix hacker survey shows how easy it is to breach perimeters

The second annual Black Report -- a hacker survey aimed at getting a different perspective on cybersecurity -- detailed how long it takes to breach a perimeter and what attacks are easiest.

By Michael Heller • April 16, 2018

A UPnP vulnerability hides bad traffic in a new way

News roundup: Home routers are susceptible to a UPnP vulnerability that proxies bad traffic in a new way. Plus, AMD and Microsoft released patches for the Spectre flaw, and more.

By Madelyn Bacon • April 13, 2018

Cryptojacking attacks may not challenge ransomware dominance

Cryptojacking attacks are on the rise, but experts are unsure if the threat can overtake the malware dominance of ransomware due to regulatory and profit questions.

By Michael Heller • April 12, 2018

Ransomware threat tops Verizon Data Breach Report

After years of climbing the ranks in the Verizon Data Breach Investigations Report, the ransomware threat has finally taken the top spot as the most prevalent malware type.

By Michael Heller • April 11, 2018

Misconfigured cloud storage leaves 1.5B files exposed

Researchers found misconfigured cloud storage across multiple platforms left huge amounts of data exposed, including medical information and payroll data.

By Michael Heller • April 6, 2018

Pipeline cyberattack shuts down natural gas company communications

News roundup: A pipeline cyberattack shut down communications for several U.S. natural gas providers. Plus, Facebook removed accounts and pages run by the Russian IRA, and more.

By Madelyn Bacon • April 6, 2018

Microsoft created Windows Defender flaw by breaking UnRAR code

Microsoft's poor coding when forking and modifying open source UnRAR code introduced a critical Windows Defender flaw that could allow an attacker full system rights.

By Michael Heller • April 6, 2018

Intel’s Spectre microcode patch not coming for older chips

No Spectre microcode patches will be coming for older Intel processors, but the newest generation of Intel CPUs will have mitigations built in when they ship later this year.

By Michael Heller • April 5, 2018

How a Blizzard DNS rebinding flaw put millions of gamers at risk

A Blizzard DNS rebinding flaw could have put users of its online PC games at risk of attack. Expert Michael Cobb explains how a DNS rebinding attack works and what to do about it.

By Michael Cobb • April 5, 2018

New cloud threats as attackers embrace the power of cloud

Safeguarding your critical data is getting harder as threat actors embrace the advantages -- and missteps -- of cloud. Here's what to watch out for in 2018.

By Kathleen Richards • April 3, 2018

OIG report on San Bernardino iPhone case criticizes FBI

A new government report claims poor communication was to blame for the FBI's court case being filed against Apple despite a San Bernardino iPhone unlock method being almost ready at the time.

By Michael Heller • March 30, 2018

How are logic devices like WAGO PFC200 used by hackers?

The Department of Homeland Security warned of a vulnerability affecting WAGO PFC200 logic devices. Discover how this flaw enables threat actors with expert Judith Myerson.

By Judith Myerson • March 29, 2018

Windows Meltdown patches open up more severe issue

A security researcher discovered the recent Windows Meltdown patches may fix the Intel flaws, but also introduced a more severe vulnerability in some versions of Windows.

By Michael Heller • March 28, 2018

Zyklon malware: What Microsoft Office flaws does it exploit?

Zyklon malware targets three previously patched Microsoft Office vulnerabilities. Learn how attackers can access passwords and cryptocurrency wallet data with expert Judith Myerson.

By Judith Myerson • March 28, 2018

How can a Moxa MXview vulnerability be exploited by hackers?

A vulnerability was found in Moxa MXview -- a software used to visualize network devices and physical connections. Learn how this vulnerability can enable privilege escalation.

By Judith Myerson • March 27, 2018

Intel AMT flaw: How are corporate endpoints put at risk?

A recent flaw in Intel's Advanced Management Technology enables hackers to gain access to endpoint devices. Discover how this flaw can be mitigated with expert Judith Myerson.

By Judith Myerson • March 26, 2018

AMD patches for Ryzen chip flaws due ‘in the coming weeks’

AMD patches are in the works for the Ryzen and EPYC chip flaws announced without the normal disclosure, but CTS Labs continues to stress the severity of the issues.

By Michael Heller • March 23, 2018

IBM outlines visions for crypto anchors, lattice cryptography

At IBM's Think conference, Big Blue researchers discussed new security-centric projects around blockchain databases, crypto anchors and quantum-resilient encryption.

By Rob Wright • March 20, 2018

Russian government hacking earns U.S. sanctions, warnings

The U.S. Treasury Department levied sanctions for Russian government hacking, as a joint alert from the FBI and DHS confirms election meddling and critical infrastructure attacks.

By Michael Heller • March 16, 2018

Addressing vulnerable web systems that are often overlooked

Web security vulnerability scanners often focus on large applications within the enterprise. However, there are plenty of overlooked web systems that contain hidden flaws.

By Kevin Beaver • March 16, 2018

Com.google.provision virus: How does it attack Android devices?

The com.google.provision virus reportedly targets Android users, but little is known about it. Nick Lewis discusses the mystery threat and how Common Malware Enumeration may help.

By Nick Lewis • March 15, 2018

Internet Explorer bug: How does it expose address bar info?

A bug in Microsoft's Internet Explorer update exposes information that users enter into the browser's address bar. Learn more about the bug and URL tracking with Nick Lewis.

By Nick Lewis • March 14, 2018

CCleaner malware: How dangerous is it to enterprises?

A watering hole attack led to CCleaner malware being installed on millions of systems. Nick Lewis explains how the attack worked and why it should concern enterprises.

By Nick Lewis • March 13, 2018

Olympic Destroyer was a false flag cyberattack, research claims

New research claims Olympic Destroyer was not the work of the North Korea-backed Lazarus Group; rather, it was a false flag cyberattack designed to mislead attribution efforts.

By Michael Heller • March 12, 2018

ExpensiveWall malware: How does this SMS attack function?

A new SMS malware known as ExpensiveWall was recently discovered by Check Point. Learn how it infects devices and puts Android device users at risk with expert Nick Lewis.

By Nick Lewis • March 12, 2018