Threats & Vulnerabilities: Page
-
Brand Experience Team/TechTarget
Critical Ivanti Connect Secure zero-day flaw under attack
Although Ivanti has seen exploitation of CVE-2025-0282 in only Ivanti Connect Secure instances, Ivanti Policy Secure and ZTA gateways are also vulnerable to the flaw.
By Alexander Culafi • Jan. 8, 2025 -
Brand Experience Team/TechTarget
How to spot a card skimmer
Cybercrime isn't just online. Skimming scams are rising at ATMs, gas pumps and registers. Learn how to spot, avoid and respond to these hidden card-stealing devices.
By Ava DePasquale • Jan. 6, 2025 -
Brand Experience Team/TechTarget
Dozens of Chrome extensions hacked in threat campaign
Although data security vendor Cyberhaven disclosed that its Chrome extension was compromised on Dec. 24, additional research suggests the broader campaign could be months older.
By Alexander Culafi • Jan. 2, 2025 -
Brand Experience Team/TechTarget
10 of the biggest ransomware attacks in 2024
Ransomware attacks against U.S. organizations in 2024 disrupted healthcare systems, supply chains and government services and led to tens of millions of dollars in ransom payments.
By Arielle Waldman • Dec. 30, 2024 -
Brand Experience Team/TechTarget
Podcast
Risk & Repeat: The state of ransomware in 2024
Ransomware made major headlines in 2024, from the massive Change Healthcare attack to the creative takedown of the notorious LockBit ransomware-as-a-service gang.
By Alexander Culafi • Dec. 23, 2024 -
Brand Experience Team/TechTarget
CISA issues mobile security guidance following China hacks
Following the Salt Typhoon attacks, CISA offers advice to 'highly targeted' individuals, such as using end-to-end encryption and moving away from purely SMS-based MFA.
By Alexander Culafi • Dec. 18, 2024 -
Brand Experience Team/TechTarget
Cleo zero-day vulnerability gets CVE as attacks continue
The new Cleo zero-day vulnerability, CVE-2024-55956, is separate from CVE-2024-50623 despite both vulnerabilities being used by threat actors to target the same endpoints.
By Alexander Culafi • Dec. 16, 2024 -
Brand Experience Team/TechTarget
ESET: RansomHub most active ransomware group in H2 2024
The antimalware vendor says law enforcement operations against the LockBit ransomware gang were successful, but a new prolific group has emerged in its place.
By Arielle Waldman • Dec. 16, 2024 -
Brand Experience Team/TechTarget
Podcast
Risk & Repeat: Attacks ramp up on Cleo MFT software
Earlier this week, threat actors began exploiting a zero-day vulnerability in Cleo's managed file transfer products, but the details of the flaw remain unclear.
By Alexander Culafi • Dec. 13, 2024 -
Brand Experience Team/TechTarget
Cleo patches file transfer zero-day flaw under attack
Cleo published a patch for its Harmony, VLTrader and LexiCom managed file transfer products, which addresses a 'critical vulnerability' that's separate from CVE-2024-50623.
By Alexander Culafi • Dec. 12, 2024 -
Brand Experience Team/TechTarget
Citrix NetScaler devices targeted in brute force campaign
Citrix advised NetScaler customers to ensure that their devices are fully updated and properly configured to defend against the recent spike in brute force attacks.
By Alexander Culafi • Dec. 10, 2024 -
Brand Experience Team/TechTarget
What is a stream cipher?
A stream cipher is an encryption method in which data is encrypted one byte at a time.
By Rahul Awati • Dec. 10, 2024 -
Brand Experience Team/TechTarget
Attackers exploit vulnerability in Cleo file transfer software
Cleo disclosed and patched the remote code execution vulnerability in late October, but managed file transfer products have proved to be popular targets for threat actors.
By Arielle Waldman • Dec. 9, 2024 -
Brand Experience Team/TechTarget
Ultralytics YOLO AI model compromised in supply chain attack
While Ultralytics has not released an official security advisory, the company pulled two recent versions of its YOLO11 AI model after reports said they contained a cryptominer.
By Arielle Waldman • Dec. 6, 2024 -
Brand Experience Team/TechTarget
Police bust cybercrime marketplace, phishing network
As part of Europol's announcement of the cybercriminal marketplace's disruption, the agency included an image of a takedown notice referencing the 'Manson Market.'
By Alexander Culafi • Dec. 5, 2024 -
Brand Experience Team/TechTarget
FBI: Criminals using AI to commit fraud ‘on a larger scale’
As AI technology becomes more widely adopted, attackers are abusing it for their scams, which the FBI says are becoming increasingly more difficult to detect.
By Arielle Waldman • Dec. 4, 2024 -
Brand Experience Team/TechTarget
FOSS security concerns increase amid widespread adoption
A new report from the Linux Foundation, OpenSSF and Harvard University calls for transparency and standardization to address growing security risks in open source software.
By Arielle Waldman • Dec. 4, 2024 -
Brand Experience Team/TechTarget
Ransomware attacks on critical sectors ramped up in November
Supply chain software vendor Blue Yonder and energy management giant Schneider Electric SE experienced some of the most notable ransomware incidents in November.
By Alexander Culafi • Dec. 3, 2024 -
Brand Experience Team/TechTarget
New York fines Geico, Travelers $11.3M over data breaches
The two insurance giants were fined millions by New York state regulators and are required to enhance security protocols around authentication and penetration testing.
By Arielle Waldman • Nov. 26, 2024 -
Brand Experience Team/TechTarget
Russian hackers exploit Firefox, Windows zero-days in wild
RomCom threat actors chain two Firefox and Windows zero-day vulnerabilities together in order to execute arbitrary code in vulnerable Mozilla browsers.
By Alexander Culafi • Nov. 26, 2024 -
Brand Experience Team/TechTarget
Volexity details Russia’s novel ‘Nearest Neighbor Attack’
The security company warned that the new attack style highlights the importance of securing Wi-Fi networks, implementing MFA and patching known vulnerabilities.
By Arielle Waldman • Nov. 22, 2024 -
Brand Experience Team/TechTarget
What is a threat intelligence feed?
A threat intelligence feed, also known as a TI feed, is an ongoing stream of data related to potential or current threats to an organization's security.
By Nick Barney, Ivy Wigmore • Nov. 21, 2024 -
Brand Experience Team/TechTarget
DOJ charges 5 alleged Scattered Spider members
The defendants, charged for conducting alleged phishing scams across the U.S., are suspected members of a prolific threat group responsible for last year's casino attacks.
By Alexander Culafi • Nov. 21, 2024 -
Brand Experience Team/TechTarget
Podcast
Risk & Repeat: China hacks major telecom companies
The FBI and CISA confirmed reports that Salt Typhoon breached several major telecom companies and accessed data related to law enforcement requests.
By Alexander Culafi • Nov. 20, 2024 -
Brand Experience Team/TechTarget
What is Common Vulnerabilities and Exposures (CVE)?
Common Vulnerabilities and Exposures (CVE) is a publicly listed catalog of known security threats.
By Nick Barney, Rahul Awati • Nov. 20, 2024
Previous
