Threats & Vulnerabilities: Page
-
Brand Experience Team/TechTarget
Serious macOS flaw in High Sierra allows attackers to log in as root
An Apple macOS flaw in High Sierra could allow an attacker to bypass any authentication dialog, including signing in to a system as a full root user.
By Michael Heller • Nov. 29, 2017 -
Brand Experience Team/TechTarget
Uber breach affected 57 million users, covered up for a year
A 2016 Uber breach affecting data for 57 million users was covered up by the company, including a $100,000 payment to the attackers to keep the incident quiet.
By Michael Heller • Nov. 22, 2017 -
Brand Experience Team/TechTarget
Google bug bounty pays $100,000 for Chrome OS exploit
An anonymous security researcher has once again earned the top Google bug bounty prize in the Chrome Reward Program for a Chrome OS exploit chain.
By Michael Heller • Nov. 17, 2017 -
Brand Experience Team/TechTarget
Kaspersky sheds more light on Equation Group malware detection
A lengthy Kaspersky report offers more insight into how the antivirus company discovered Equation Group malware and came to possess classified U.S. government data.
By Rob Wright • Nov. 16, 2017 -
Brand Experience Team/TechTarget
Federal vulnerability review under new VEP still has questions
Experts are still unsure about the Vulnerabilities Equities Process, but admit the new VEP Charter could be a good step toward improving federal vulnerability review.
By Michael Heller • Nov. 16, 2017 -
Brand Experience Team/TechTarget
Expert Advice
What QNAP vulnerabilities affect NAS storage device security?
QNAP vulnerabilities in NAS enabled attackers to control devices. Expert Judith Myerson explains each of the QNAP NAS vulnerabilities and their fixes.
By Judith Myerson • Nov. 16, 2017 -
Brand Experience Team/TechTarget
New VEP Charter promises vulnerability transparency
The White House wants a more open Vulnerabilities Equities Process and has unveiled a new VEP Charter in order to promote transparency in bug reviews.
By Michael Heller • Nov. 15, 2017 -
Brand Experience Team/TechTarget
AVGater abuses antivirus software for local system takeover
A new proof-of-concept exploit, called AVGater, has found a way to abuse antivirus quarantines to attack systems and gain full control.
By Michael Heller • Nov. 14, 2017 -
Brand Experience Team/TechTarget
FBI hacking may have crossed international borders
New court documents indicate an FBI hacking operation may have crossed international borders and infected systems in Russia, China and Iran.
By Michael Heller • Nov. 9, 2017 -
Brand Experience Team/TechTarget
SAVE Act attempts to bolster election security
Two senators introduced a bipartisan election security bill called the SAVE Act, which aims to improve voting infrastructure and harden state systems against attack.
By Michael Heller • Nov. 2, 2017 -
Brand Experience Team/TechTarget
DUHK attack puts random number generators at risk
News roundup: Researchers find DUHK attacks can get around encrypted communications. Plus, FBI Director Wray criticizes mobile device encryption, and more.
By Madelyn Bacon • Oct. 27, 2017 -
Brand Experience Team/TechTarget
Warning for Equifax security issues came months before breach
A security researcher reportedly disclosed a number of Equifax security issues to the company months before the major data breach, and none of the problems were fixed.
By Michael Heller • Oct. 27, 2017 -
Brand Experience Team/TechTarget
Expert Advice
EternalRocks malware: What exploits are in it?
When NSA cyberweapons went public, attackers bundled them into the EternalRocks malware. Nick Lewis takes a closer look at this new threat and explains what's lurking inside.
By Nick Lewis • Oct. 27, 2017 -
Brand Experience Team/TechTarget
NSA cyberweapons report follows Kaspersky transparency plan
A Kaspersky transparency initiative and a full code review of its products are on the way, and a new Kaspersky statement explained how NSA cyberweapons were uploaded to its servers.
By Michael Heller • Oct. 25, 2017 -
Brand Experience Team/TechTarget
Expert Advice
Samsung S8 iris scanner: How was it bypassed?
Hackers bypassed the Samsung S8 iris scanner, which could spell trouble for biometric authentication. Expert Nick Lewis explains how it happened and how to stay protected.
By Nick Lewis • Oct. 24, 2017 -
Brand Experience Team/TechTarget
Expert Advice
HP keylogger: How did it get there and how can it be removed?
A keylogging flaw found its way into dozens of Hewlett Packard laptops. Nick Lewis explains how the HP keylogger works and what can be done about it.
By Nick Lewis • Oct. 23, 2017 -
Brand Experience Team/TechTarget
KRACK WPA2 flaw might be more hype than risk
Researchers discover a WPA2 vulnerability and brand it KRACK, but some experts say the early reports overstate the risk of the flaw and downplay the difficulty of an exploit.
By Michael Heller • Oct. 17, 2017 -
Brand Experience Team/TechTarget
Expert Advice
Analyzing the flaws of Adobe’s HTTP security headers
A recent patching issue with Flash drew attention to shortcomings with Adobe's HTTP security headers. Judith Myerson discusses the importance of HTTP header security.
By Judith Myerson • Oct. 17, 2017 -
Brand Experience Team/TechTarget
Equifax website hack blamed on drive-by download attack
Security researchers find drive-by download attacks affecting both Equifax and TransUnion, but Equifax claims systems were not compromised in the website hack.
By Michael Heller • Oct. 13, 2017 -
Brand Experience Team/TechTarget
DEFCON hopes voting machine hacking can secure systems
The first official report on voting machine hacking from DEFCON suggests the need for pen testing, basic security guidelines and cooperation from local and federal governments.
By Michael Heller • Oct. 12, 2017 -
Brand Experience Team/TechTarget
Expert Advice
How can hackers use subtitle files to control endpoint devices?
New media player vulnerabilities have been exposed that enable hackers to use subtitle files to control devices. Expert Judith Myerson explains how this happens.
By Judith Myerson • Oct. 12, 2017 -
Brand Experience Team/TechTarget
Expert Advice
Foxit Reader vulnerabilities: What can be done to mitigate them?
Two critical, zero-day Foxit Reader vulnerabilities haven't been patched and pose a threat to enterprises. Judith Myerson explains the vulnerabilities and how to mitigate them.
By Judith Myerson • Oct. 11, 2017 -
Brand Experience Team/TechTarget
Windows 10 patching could make older systems vulnerable
Microsoft's practice of automatic Windows 10 patching could be uncovering vulnerabilities in older systems that can be exploited by attackers, Google researchers said.
By Michael Heller • Oct. 11, 2017 -
Brand Experience Team/TechTarget
Expert Advice
How does an Amazon Echo vulnerability enable attackers to eavesdrop?
Hackers could take advantage of a physical Amazon Echo vulnerability to turn the Echo into a listening device. Judith Myerson explains how this works and what can be done about it.
By Judith Myerson • Oct. 9, 2017 -
Brand Experience Team/TechTarget
NSA breach leads to theft of government spy software
An NSA contractor became the target of a cyberattack after storing agency spying software on a personal device, and this NSA breach has caused a rise in fears regarding Russia.
By Michael Heller • Oct. 7, 2017
Previous
