Threats & Vulnerabilities: Page

Intel Meltdown patch causes issues with Broadwell and Haswell

Customers reported the firmware Intel Meltdown patch caused reboot issues on Broadwell and Haswell chipsets, leading to a patch review by Intel.

By Michael Heller • Jan. 12, 2018

AMD backtracks on Spectre vulnerabilities, plans microcode updates

AMD initially believed the Spectre vulnerabilities posed "near zero risk" to its chip, but the company this week reversed course and is planning microcode updates for its products.

By Rob Wright • Jan. 12, 2018

Fancy Bears hackers target International Olympic Committee

News roundup: The hacking group called Fancy Bears claims to have hacked the Olympics again. Plus, a former NSA contractor pleads guilty to stealing government data, and more.

By Madelyn Bacon • Jan. 12, 2018

What went wrong with the Dirty COW vulnerability patch?

A patch was issued for the Dirty COW vulnerability, but researchers later discovered problems with the patch. Expert Judith Myerson explains what went wrong.

By Judith Myerson • Jan. 12, 2018

Spectre patches highlight January 2018 Patch Tuesday

Microsoft's January 2018 Patch Tuesday brings Meltdown and Spectre patches to users, except those on AMD chipsets or those with incompatible antivirus.

By Michael Heller • Jan. 10, 2018

How can a BGP vulnerability in Cisco products be fixed?

A BGP vulnerability in some Cisco products enabled denial-of-service attacks. Expert Judith Myerson explains the vulnerability and how Cisco fixed the problem.

By Judith Myerson • Jan. 8, 2018

Unknown apps: How does Android Oreo control installation?

Android Oreo replaced the allow unknown sources setting with a new feature that enables users to selectively install unknown apps. Kevin Beaver explains what this change means.

By Kevin Beaver • Jan. 5, 2018

The ROCA vulnerability: How it works and what to do about it

The ROCA vulnerability is a serious flaw in cryptographic keys. Expert Michael Cobb explains what the flaw is, how it works and what can be done to lessen the risk to enterprises.

By Michael Cobb • Jan. 4, 2018

Intel CPU flaw gets third-party patch but no details

Release of a third-party patch for a mysterious Intel CPU flaw led to many questions but few answers, and details on the issue may not be imminent.

By Michael Heller • Jan. 3, 2018

IOHIDeous is a macOS zero-day for the new year

A newly discovered macOS zero-day flaw, called IOHIDeous, affects all versions of Apple's desktop operating system and can allow for full-system compromise.

By Michael Heller • Jan. 2, 2018

Broadpwn flaw: How does the new iOS exploit compare?

An iOS exploit similar to the Broadpwn flaw was recently developed by a researcher at Google's Project Zero. Expert Kevin Beaver explains what the exploit is and how it works.

By Kevin Beaver • Jan. 2, 2018

Cryptocurrency exchanges increasingly targeted by cyberattacks

News roundup: Cryptocurrency exchanges are folding because of targeted cyberattacks. Plus, five hackers were arrested in connection with international ransomware attacks, and more.

By Madelyn Bacon • Dec. 22, 2017

QakBot malware: How did it trigger Microsoft AD lockouts?

QakBot malware triggered hundreds of thousands of Microsoft Active Directory account lockouts. Discover the malware's target and how these attacks are being carried out.

By Nick Lewis • Dec. 20, 2017

Zusy malware: Are your PowerPoint files at risk?

Several spam campaigns were discovered after a malicious PowerPoint file was exposed. Learn how Zusy malware is delivered upon hovering over hypertext and how files can be saved.

By Nick Lewis • Dec. 18, 2017

Triton framework used in industrial control attacks

Security researchers discovered new ICS attacks using the Triton framework that may have been nation-state-sponsored and intended to cause real-world damage.

By Michael Heller • Dec. 15, 2017

Mirai creators and operators plead guilty to federal charges

The Department of Justice announced guilty pleas from the three Mirai creators and operators behind the massive worldwide botnet DDoS attacks in 2016.

By Michael Heller • Dec. 14, 2017

How can a local file inclusion attack be stopped?

A botnet-based local file inclusion attack targeted IBM X-Force customers. Expert Judith Myerson explains how these attacks work and how enterprises can defend against them.

By Judith Myerson • Dec. 13, 2017

1.4 billion stolen credentials found on dark web

A massive repository containing more than 1.4 billion stolen credentials was found on the dark web with special features for malicious actors.

By Michael Heller • Dec. 12, 2017

Hacker behind Uber data breach was paid off through bug bounty

News roundup: The man responsible for the 2016 Uber data breach is a 20-year-old from Florida. Plus, Ethiopia reportedly targeted dissidents with Israeli spyware, and more.

By Madelyn Bacon • Dec. 8, 2017

LDAP injection: How was it exploited in a Joomla attack?

After eight years, Joomla discovered an LDAP vulnerability that could be exploited by threat actors. Learn how the attack works from expert Matt Pascucci.

By Matthew Pascucci • Dec. 8, 2017

Army cyber officer hiring to build the future of warfare

A new initiative plans Army cyber officer hiring over the course of five years, but experts are skeptical it can attract the best candidates away from the private sector.

By Michael Heller • Dec. 7, 2017

BlueBorne vulnerabilities: Are your Bluetooth devices safe?

Armis Labs discovered a series of vulnerabilities that enables remote connection to Bluetooth devices. Learn more about the BlueBorne vulnerabilities with expert Matt Pascucci.

By Matthew Pascucci • Dec. 7, 2017

Keyboard data leak exposes millions of personal records

A keyboard data leak by mobile developer Ai.type exposed millions of personal records through misconfigured MongoDB database settings.

By Michael Heller • Dec. 5, 2017

Apple High Sierra patch undone by macOS update

Apple released a High Sierra patch to fix a serious macOS authentication vulnerability discovered last week, but users could accidentally undo the patch with a routine OS update.

By Michael Heller • Dec. 5, 2017

How does the GhostHook attack bypass Microsoft PatchGuard?

A technique known as the GhostHook attack can get around PatchGuard, but Microsoft hasn't patched the flaw. Expert Michael Cobb explains why, as well as how the attack works.

By Michael Cobb • Dec. 1, 2017