Threats & Vulnerabilities: Page

NSA tracking program watched foreign hackers in action

Researchers discovered evidence of an NSA tracking program designed to watch nation-state hackers and gather information as attacks were in progress.

By Michael Heller • March 8, 2018

How does a WPAD attack work and how can it be prevented?

Google Project Zero discovered a WPAD attack that could target systems running Windows 10. Expert Michael Cobb explains how the attack works and how to bolster WPAD security.

By Michael Cobb • March 8, 2018

What the Azure AD Connect vulnerability can teach enterprises

Enterprises should learn from a Microsoft Azure AD Connect vulnerability that security requires a hands-on approach. Expert Rob Shapland takes a closer look at the permissions flaw.

By Rob Shapland • March 7, 2018

Terabit DDoS attack hits 1.7Tbps and experts expect higher

Five days after a record breaking terabit DDoS attack, a new 1.7Tbps DDoS attack was detected taking advantage of improperly secured memcached servers to launch a reflection attack.

By Michael Heller • March 6, 2018

Equifax data breach affected 2.4 million more consumers

The massive Equifax data breach affected even more people. The startling total is now 147.9 million U.S. consumers who had their information stolen by hackers.

By Madelyn Bacon • March 6, 2018

How does Tizi spyware affect Android apps?

Android apps affected by Tizi spyware were found in the Google Play Store by Google's Play Protect team. Expert Michael Cobb reviews the threat and how it was fixed.

By Michael Cobb • March 6, 2018

Cellebrite claims it can unlock Apple devices, but questions remain

News roundup: Cellebrite claims it can unlock Apple devices, according to a Forbes report. Plus, iCloud encryption keys will now be stored in China, and more.

By Madelyn Bacon • March 2, 2018

Why the Bleichenbacher attack is still around

The Bleichenbacher attack got a new name after 20 years. Expert Michael Cobb reviews the ROBOT attack and discusses why it's still active this long after it emerged.

By Michael Cobb • March 1, 2018

Visa reports EMV chip cards thwart fraud, but criminals adapting

Visa points to a 70% drop in fraud due to EMV chip cards, as consumers and merchants adopt the new payment card technology. But criminals are shifting their own focus to adapt.

By Peter Loshin • Feb. 28, 2018

Fileless malware: What tools can jeopardize your system?

A report from CrowdStrike highlights the growth of malware-less attacks using certain command-line tools. Learn how to handle these growing attacks with Matt Pascucci.

By Matthew Pascucci • Feb. 28, 2018

Ad network cryptojacking attack bypasses ad blockers

Qihoo 360's Netlab team discovered an online ad network has been bypassing ad blockers and running cryptomining software in the browsers of unsuspecting visitors.

By Rob Wright • Feb. 27, 2018

Hackers used SWIFT-based attacks to steal millions from banks

News roundup: Hackers once again used SWIFT-based attacks to steal millions from Russian and Indian banks. Plus, hackers used an L.A. Times website for cryptojacking, and more.

By Madelyn Bacon • Feb. 23, 2018

How did OurMine hackers use DNS poisoning to attack WikiLeaks?

The OurMine hacking group recently used DNS poisoning to attack WikiLeaks and take over its web address. Learn how this attack was performed from expert Nick Lewis.

By Nick Lewis • Feb. 23, 2018

Typosquatting: How did threat actors access NPM libraries?

Typosquatting was used by threat actors to spread malware in the NPM registry. Learn from expert Nick Lewis how this method was used and what it means for users.

By Nick Lewis • Feb. 22, 2018

Cryptojacking attacks hit enterprises’ cloud servers

Cloud security vendor RedLock discovered threat actors had gained access to several enterprise cloud environments, including Tesla's, and used them for cryptojacking schemes.

By Rob Wright • Feb. 21, 2018

Google discloses Microsoft Edge vulnerability without a patch

Google's Project Zero publicly published an Edge browser vulnerability after the 90-day disclosure deadline expired, and Microsoft has yet to patch the flaw.

By Madelyn Bacon • Feb. 21, 2018

GD library: How did it open the Junos OS to attacks?

The GD library used in the Junos operating system has opened Junos up to attacks. Nick Lewis explains how it happened and what it means for companies using open source software.

By Nick Lewis • Feb. 20, 2018

Olympic Destroyer malware more complex than first thought

News roundup: The Olympic Destroyer malware is more sophisticated than researchers first thought. Plus, Microsoft looks to change identity management with blockchain, and more.

By Madelyn Bacon • Feb. 16, 2018

SonicWall spots Meltdown exploits with machine learning tech

SonicWall says its new deep memory inspection technology, which powers the vendor's Capture Cloud sandbox service, can block Meltdown threats and other zero-day attacks.

By Rob Wright • Feb. 16, 2018

What can be done to prevent a swatting attack?

A swatting attack resulted in the death of a Kansas man. Expert Judith Myerson looks at the technology these attacks use and what can be done to make sure they don't happen again.

By Judith Myerson • Feb. 16, 2018

How does the Devil’s Ivy bug compromise security cameras?

The Devil's Ivy bug affects millions of internet-connected security cameras. Expert Judith Myerson explains how the exploit works and what can be done to prevent it.

By Judith Myerson • Feb. 15, 2018

Zero-day Telegram vulnerability exploited for cryptomining

Kaspersky Lab disclosed a zero-day vulnerability in Telegram that the security vendor says was abused by Russian cybercriminals in a cryptomining malware campaign.

By Rob Wright • Feb. 14, 2018

How to prevent SQL injection attacks in your enterprise

SQL injection attacks threaten enterprise database security, but the use of cloud services can reduce the risk. Here's a look at some alternative SQL injection protection methods.

By Frank Siemons • Feb. 14, 2018

Get ready for CISSP Domain 7: Cyberattack prevention quiz

Do you know what it takes to stop bad guys in their tracks? Find out with this practice quiz on cybersecurity methods and tools used to thwart or recover from an attack.

By (ISC) 2 • Feb. 13, 2018

How did a Microsoft Equation Editor flaw put systems at risk?

A stack buffer overflow vulnerability in Microsoft Equation Editor may have put enterprises at risk of compromise. Expert Judith Myerson explains what went wrong.

By Judith Myerson • Feb. 12, 2018