Threats & Vulnerabilities: Page
-
Brand Experience Team/TechTarget
NSFocus: DeepSeek AI hit with ‘well planned’ DDoS attacks
Cybersecurity vendor NSFocus said AI startup DeepSeek endured multiple waves of DDoS attacks from attackers since its reasoning model was released Jan. 20.
By Alexander Culafi • Feb. 3, 2025 -
Brand Experience Team/TechTarget
Podcast
Risk & Repeat: DeepSeek security issues emerge
The introduction of DeepSeek's new generative AI models has been met with fervor, but security issues have created apparent challenges for the Chinese startup.
By Alexander Culafi • Jan. 30, 2025 -
Brand Experience Team/TechTarget
German police disrupt Cracked, Nulled cybercrime forums
Cracked and Nulled had a combined community of approximately 10 million users who used the sites to discuss cybercrime and sell malware and hacking tools.
By Alexander Culafi • Jan. 30, 2025 -
Brand Experience Team/TechTarget
Google details adversarial AI activity on Gemini
Google identified APTs from more than 20 nations misusing its Gemini AI chatbot but noted that threat actors were unsuccessful in finding novel techniques or vulnerabilities.
By Alexander Culafi • Jan. 29, 2025 -
Brand Experience Team/TechTarget
DeepSeek claims ‘malicious attacks’ disrupting AI service
DeepSeek, which gained popularity recently for its AI platform, did not specify the cause of 'large-scale malicious attacks,' which continue to disrupt new account registrations.
By Alexander Culafi • Jan. 28, 2025 -
Brand Experience Team/TechTarget
Apple zero-day vulnerability under attack on iOS devices
Apple said the zero-day vulnerability, tracked as CVE-2025-24085, affects its CoreMedia framework and 'may have been actively exploited against versions of iOS before iOS 17.2.'
By Rob Wright • Jan. 28, 2025 -
Brand Experience Team/TechTarget
What is spyware?
Spyware is a type of malicious software (malware) that is installed on a computing device without the end user's knowledge.
By Kate Brush, Alexander Gillis, Katie Terrell Hanna • Jan. 28, 2025 -
Brand Experience Team/TechTarget
Former CSRB members largely silent on dismissal
The Cyber Safety Review Board was investigating recent attacks by Chinese state-sponsored threat actor Salt Typhoon when DHS terminated all advisory board memberships.
By Alexander Culafi • Jan. 27, 2025 -
Brand Experience Team/TechTarget
DOJ indicts 5 individuals in North Korea IT worker scam
An unsealed indictment revealed threat actors working for North Korea tricked at least 64 U.S. businesses into hiring fake IT workers for financial and propriety data gains.
By Arielle Waldman • Jan. 24, 2025 -
Brand Experience Team/TechTarget
Zero-day vulnerability in SonicWall SMA series under attack
SonicWall released a hotfix for a critical pre-authentication remote code execution vulnerability in Secure Mobile Access 1000 products amidst reports of zero-day exploitation.
By Arielle Waldman • Jan. 23, 2025 -
Brand Experience Team/TechTarget
Eclypsium finds security issues in Palo Alto Networks NGFWs
Eclypsium researchers stressed how essential supply chain security is as threat actors increasingly target and exploit vulnerabilities in firewalls, VPNs and other edge devices.
By Arielle Waldman • Jan. 23, 2025 -
Brand Experience Team/TechTarget
What is hacktivism?
Hacktivism is the act of misusing a computer system or network for a socially or politically motivated reason.
By Ben Lutkevich, Madelyn Bacon, Katie Terrell Hanna • Jan. 22, 2025 -
Brand Experience Team/TechTarget
Threat actors abusing Microsoft Teams in ransomware attacks
Sophos researchers observed two separate threat campaigns in which attackers used Microsoft Teams to pose as IT support personnel and gain access to victims' systems.
By Arielle Waldman • Jan. 21, 2025 -
Brand Experience Team/TechTarget
Threat actor publishes data of 15K hacked FortiGate firewalls
Although the threat actor published the alleged stolen Fortinet FortiGate firewall data this week, the data is apparently tied to older zero-day exploitation from 2022.
By Alexander Culafi • Jan. 16, 2025 -
Brand Experience Team/TechTarget
The mystery of the $75M ransom payment to Dark Angels
The Dark Angels gang stole 100 TB of data from a Fortune 50 company last year for a record-setting ransom payment. But the victim organization still hasn't disclosed those details.
By Rob Wright • Jan. 16, 2025 -
Brand Experience Team/TechTarget
ESET details UEFI Secure Boot bypass vulnerability
ESET researchers last year discovered an unsigned binary in a third-party UEFI application that could have been abused to bypass the Secure Boot process.
By Arielle Waldman • Jan. 16, 2025 -
Brand Experience Team/TechTarget
FBI removes Chinese PlugX malware from 4,258 U.S. computers
The FBI did not inform individuals that it deleted PlugX malware from users' computers beforehand, citing the possibility of Chinese state-sponsored hackers making adjustments.
By Alexander Culafi • Jan. 15, 2025 -
Brand Experience Team/TechTarget
What is password cracking?
Password cracking is the process of using an application program to identify an unknown or forgotten password that allows access to a computer or network resource.
By Alexander Gillis, Rahul Awati • Jan. 15, 2025 -
Brand Experience Team/TechTarget
Attackers exploiting critical Fortinet zero-day vulnerability
Fortinet disclosed another zero-day vulnerability in its FortiOS and FortiProxy products days after Arctic Wolf detailed a threat campaign targeting the vendor's devices.
By Arielle Waldman • Jan. 14, 2025 -
Brand Experience Team/TechTarget
CISA: BeyondTrust flaw CVE-2024-12686 exploited in the wild
BeyondTrust discovered the flaw last month while investigating breaches of a 'limited number' of SaaS customers at the hands of Chinese state-sponsored threat actors.
By Alexander Culafi • Jan. 14, 2025 -
Brand Experience Team/TechTarget
Ivanti zero-day patching increases amid ongoing attacks
Recent scans conducted by the Shadowserver Foundation show many organizations have patched Ivanti instances vulnerable to CVE-2025-0282 over the last week.
By Arielle Waldman • Jan. 14, 2025 -
Brand Experience Team/TechTarget
Pig butchering scam explained: Everything you need to know
People wanting to make money on the cryptocurrency market are becoming targets for scammers. Scammers are even looking for their next victim through dating and social media apps.
By Amanda Hetler • Jan. 13, 2025 -
Brand Experience Team/TechTarget
Top 8 in-demand cybersecurity jobs for 2025 and beyond
Cybersecurity is a challenging career path, filled with professional opportunities. Learn about the top cybersecurity jobs and the training and background they require.
By Rahul Awati • Jan. 13, 2025 -
Brand Experience Team/TechTarget
Mandiant links Ivanti zero-day exploitation to Chinese hackers
Mandiant warned users to be prepared for widespread exploitation of CVE-2025-0282 as Ivanti products have become a popular target for attackers in recent years.
By Arielle Waldman • Jan. 9, 2025 -
Brand Experience Team/TechTarget
December ransomware attacks slam healthcare, public services
In December, one victim organization paid a $1.5 million ransom to restore services, while another continued to experience disruptions for more than one month following an attack.
By Arielle Waldman • Jan. 9, 2025
Previous
