Threat Post
Ransomware: A Persistent Scourge Requiring Corporate Action Now
ASCO is the latest headline-making organization to be hit by ransomware, prompting many companies to consider what to do to minimize their risk.
Categories: Threat Post
ThreatList: Ransomware Trojans Picking Up Steam in 2019
Attackers continue to push the boundaries with modular trojans and ransomware attacks, a new report found.
Categories: Threat Post
News Wrap: Amazon Privacy and Telegram DDoS Attack
Threatpost editors Tara Seals and Lindsey O'Donnell discuss a recent lawsuit against Amazon for its privacy policies, a Telegram DDoS attack and more.
Categories: Threat Post
TRISIS Group, Known for Physical Destruction, Targets U.S. Electric Companies
XENOTIME, a destructive APT linked to Russia, has broadened its target set beyond Middle East oil and gas.
Categories: Threat Post
Amazon Alexa Secretly Records Children, Lawsuits Allege
Two lawsuits are seeking class-action status, alleging that Amazon records children and stores their voiceprints indefinitely.
Categories: Threat Post
Millions of Linux Servers Under Worm Attack Via Exim Flaw
Attackers are exploiting a Linux Exim critical flaw to execute remote commands, download crypto miners and sniff out other vulnerable servers.
Categories: Threat Post
Hackers Favor Weekdays for Attacks, Share Resources Often
Traffic analysis sheds light on weekday habits of attackers such as the most likely day for attacks and how malicious infrastructure is shared.
Categories: Threat Post
Evernote Critical Flaw Opened Personal Data of Millions to Attack
Evernote's web clipper extension for Chrome is vulnerable to a critical flaw that could have exposed the data of more than 4.6 million users.
Categories: Threat Post
Max-Severity Bug in Infusion Pump Gateway Puts Lives at Risk
The critical bug in a connected medical device can allow an attacker to remotely manipulate hospital pumps, either to withhold meds or dispense too much.
Categories: Threat Post
Telegram CEO Fingers China State Actors for DDoS Attack
Durov took to Twitter to hint that Beijing tried to take Telegram offline to disrupt the Hong Kong protests.
Categories: Threat Post
High-Severity Cisco Flaw in IOS XE Enables Device Takeover
A high-severity flaw could give attackers full control of Cisco routers or switches.
Categories: Threat Post
Fishwrap Campaign Sways Social Media Users with Old News
215 accounts use the same family of special URL shorteners to track the effectiveness of the operation.
Categories: Threat Post
Data Breach Disclosed by Online Invitation Firm Evite
Evite's data breach, stemming from an “inactive data storage file," is only one of many breaches to be disclosed this week.
Categories: Threat Post
RAMBleed Side-Channel Attack Exposes Privileged Memory
An attacker can use Rowhammer attack to induce bit flips, thereby leaking the victim's secret data.
Categories: Threat Post
Intel NUC Firmware Open to Privilege Escalation, DoS and Information Disclosure
Intel has patched seven high-severity vulnerabilities in its mini PC NUC kit firmware.
Categories: Threat Post
New FormBook Dropper Harbors Obfuscation, Persistence
Never-before-seen dropper found in FormBook samples that has increased persistence and obfuscation capabilities.
Categories: Threat Post
Full Insight into the Internal Environment with Cynet Free Visibility
The Cynet 360 platform Free Visibility Offering is focused on IT and security professionals who know a lack of visibility is a main challenge in their daily responsibilities as end-users and service providers.
Categories: Threat Post
Microsoft Patches Four Publicly-Known Vulnerabilities
In total, 88 unique vulnerabilities were patched as part of Microsoft’s June Patch Tuesday security bulletin.
Categories: Threat Post
Google Calendar Attacks Target Unwitting Mobile Users
Automatic invite notifications are spreading malicious links.
Categories: Threat Post
Near-Ubiquitous Critical Microsoft RCE Bugs Affect All Versions of Windows
The two CVEs allow bypasses to get around NTLM relay attack mitigations.
Categories: Threat Post