Threats & Vulnerabilities: Page

How can users protect mobile devices from SandJacking attacks?

Attackers can use the SandJacking attack to access sandboxed data on iOS devices. Expert Nick Lewis explains how to protect your enterprise from this attack.

By Nick Lewis • Nov. 11, 2016

Planning for an IPv6 attack: DDoS, neighbor discovery threats and more

An IPv6 DDoS attacks are imminent, and your network security tools may not be configured for it. Expert Michael Cobb explains how enterprises can prepare its defenses.

By Michael Cobb • Sept. 2, 2016

Pegasus iOS exploit uses three zero days to attack high-value targets

A new remote iOS exploit called Pegasus leverages three zero days in what appear to be state-sponsored targeted attack campaigns against political dissidents.

By Michael Heller • Aug. 29, 2016

How can the AirDroid app phone hijacking be prevented?

A vulnerability in the AirDroid device manager app left users at risk of phone hijacking. Expert Michael Cobb explains how the exploit works, and what can be done to prevent it.

By Michael Cobb • July 4, 2016

What new Asacub Trojan features should enterprises watch out for?

The Asacub Trojan has new banking malware features. Expert Nick Lewis explains how it made this transition and what enterprises should be watching out for.

By Nick Lewis • June 21, 2016

How does the banking Trojan Dyreza exploit Windows 10?

A variant of banking Trojan Dyreza has begun to target Windows 10. Expert Nick Lewis explains the new attack functionalities, and Windows 10 and user vulnerabilities.

By Nick Lewis • April 21, 2016

Breaking down the DROWN attack and SSLv2 vulnerability

A DROWN attack can occur through more than a third of all HTTPS connections. Expert Michael Cobb explains how DROWN enables man-in-the-middle attacks and mitigation steps to take.

By Michael Cobb • April 21, 2016

How does the M-Pesa service work and what are the risks?

How does mobile microfinancing service M-Pesa allow users to make transactions without a bank account? Expert Michael Cobb explains how it works and M-Pesa security measures.

By Michael Cobb • April 13, 2016

How to protect an origin IP address from attackers

Cloud security providers protect enterprises from DDoS attacks, but attackers can still find the origin IP addresses. Expert Rob Shapland explains why that's a significant threat.

By Rob Shapland • March 7, 2016

How does the new voicemail phishing scam work?

A new phishing scam uses voicemail notification emails to spread malware. Expert Nick Lewis explains how this attack works and how enterprises can prevent it.

By Nick Lewis • Feb. 1, 2016

Old Microsoft Kerberos vulnerability gets new spotlight

A new blog post detailed authentication vulnerabilities in Microsoft Kerberos that cannot be patched and could lead to attackers having free rein over systems.

By Michael Heller • Dec. 15, 2015

Moose worm: How can enterprises stop social media fraud?

A Linux-based Moose worm causes social media fraud through infected routers. Expert Nick Lewis explains how the Moose worm works and how to avoid it.

By Nick Lewis • Dec. 7, 2015

Amex credit card hack predicts replacement card number

Samy Kamkar found a weakness in the algorithm American Express uses to generate replacement card information and created a credit card hack as a proof-of-concept.

By Michael Heller • Dec. 1, 2015

‘Going dark’: Weighing the public safety costs of end-to-end encryption

'Going dark' -- or the FBI's inability to access data because of encryption -- could put public safety at risk, intelligence officials say. But tech companies argue that strong encryption is needed to protect corporate and customer data.

By Francesca Sales • Nov. 23, 2015

Getting to the bottom of the software vulnerability disclosure debate

The vulnerability disclosure debate rages on: Enterprises should know they are at risk, but vendors need time to patch flaws. Which side should prevail? Expert Michael Cobb discusses.

By Michael Cobb • Oct. 12, 2015

How can power consumption-tracking malware be avoided?

Malware authors are using power consumption tracking-malware to eavesdrop on and attack mobile devices. Expert Nick Lewis explains the threat and how to defend against it.

By Nick Lewis • Oct. 1, 2015

How can I mitigate the risks of alternative Android browsers?

Expert Michael Cobb explains the security risks surrounding alternative Web browsers, as well as approaches enterprises can take to prevent BYOD employees from using them.

By Michael Cobb • Aug. 13, 2015

Six criteria for purchasing unified threat management appliances

Expert Ed Tittel explores key criteria for evaluating unified threat management (UTM) appliances to determine the best choice for your organization.

By Ed Tittel • July 16, 2015

Understanding and mitigating a FREAK vulnerability attack

After the discovery that the FREAK vulnerability can affect a wide variety of OSes, enterprises should amp up mitigation efforts. Here's some background on the attack and how to stop it.

By Randall Gamby • June 1, 2015

Social engineering: You got nailed!

Move beyond prevention to fast detection to combat a stealthy social engineering attack.

By Sally Johnson • April 1, 2015

Amid Apple Pay fraud, banks scramble to fix Yellow Path process

Banks are rushing to fix sloppy authentication processes at the heart of rising Apple Pay fraud. Experts also worry about potential fraud with other mobile payment systems.

By Michael Heller • March 3, 2015

Detecting backdoors: The Apple backdoor that never was?

The debate over the purported Apple backdoor leaves enterprises asking, "When is a backdoor not a backdoor?" Application security expert Michael Cobb explains the difference.

By Michael Cobb • Jan. 7, 2015

Targeted Cyber Attacks

In this excerpt of Targeted Cyber Attacks, authors Aditya Sood and Richard Enbody outline the cyberattack model and different vectors used to attack targets.

By SearchSecurity and Syngress • Dec. 16, 2014

Understanding security flaws in IPv6 addressing schemes

Expert Fernando Gont explains why underlying characteristics of IPv6 address-generation schemes may enable nodes to be targeted in IPv6 address-scanning attacks.

By Fernando Gont • Dec. 2, 2014

How vulnerable is Silverlight security?

Microsoft Silverlight has been in the spotlight due to an increase in the number of exploit kits it is included in. Expert Nick Lewis explains the threat's severity and how to mitigate it.

By Nick Lewis • Nov. 18, 2014