CISA adds Microsoft SharePoint vulnerability to the KEV Catalog

News September 29, 2021

High-Severity Vulnerabilities Now Take Nearly 250 Days to Remediate, Survey Finds

2 min read - Businesses and agencies today are spending an average of about 250 days to remediate high-severity risks, NTT Application Security found. This length of time gives attackers nearly a year in the target network. From there, they can misuse security weaknesses…

News September 23, 2021

Cloud Security: Report Finds 68% of Malware Delivered From Cloud Apps

2 min read - Cloud apps are now the most common way digital attackers distribute malware. In the second quarter of 2021, researchers found that 68% of malware downloads originated from cloud apps, reported ZDNet. In order to keep your cloud security up, it’s…

News September 16, 2021

Attackers Spread Cobalt Strike Through Backdoor in Common Apps

2 min read - Researchers discovered a new attack campaign targeting online gambling companies in China with one of two malware payloads. In one scenario detected by Trend Micro, the campaign dropped a previously undocumented backdoor written in Python. The security firm dubbed this…

News September 9, 2021

Fake Cryptomining Apps Stole Over $350K From Android Users

2 min read - Cryptomining has become a lucrative industry, growing more and more mainstream. Now, attackers are trying to grab a bit of that cash with apps that claim to automate it. But when downloaded, the apps don’t do anything except take your…

News September 1, 2021

Ransomware Gangs Using Data Leak Sites to Recruit New Affiliates

2 min read - Ransomware gangs have a new technique to recruit affiliates: posting announcements on their own data leaks websites. This provides a look into today’s so-called ransomware-as-a-service (RaaS), in which people can pay to have some of the work automated for them.…

News August 23, 2021

DirtyMoe Botnet Returns With Undetectable Threat Profile

2 min read - The malware botnet known as DirtyMoe has been around since at least 2016, but its newest version makes some major changes that put it back in the spotlight. Take a look at how the new version works, what is different…

News August 17, 2021

U.S. Names Ransomware Attacks a Similar Priority to Terrorism

2 min read - At the beginning of May, a U.S. pipeline company suffered a ransomware attack. The company halted operations for several days, causing a spike in gas prices and localized fuel shortages. It also decided to meet the threat actors’ demands of…

News August 12, 2021

Newly Studied ‘Poltergeist Attacks’ Trick Autonomous Vehicles

2 min read - There’s something spooky going on. New research from the Ubiquitous System Security Lab, Zhejiang University Security and Privacy Research Group and the University of Michigan found ‘poltergeist’ (PG) attacks can fool autonomous vehicles in a way that hasn’t been seen…

News August 6, 2021

Ransomware Costs Expected to Reach $265 Billion by 2031

2 min read - Think ransomware is expensive now? It’s not predicted to get any cheaper over the next decade. Ransoms could cost victims a collective total of $265 billion by 2031. The estimate is based on the prediction that the price tag will…

News July 19, 2021

Android Security: Over 150 Security and Privacy Issues Found on Stalkerware

2 min read - Who stalks the stalkers? When it comes to Android security, stalkerware presents a double risk. It’s common knowledge that mobile stalkerware undermines a target’s privacy. That’s kind of the point. A stalkerware incident often involves someone, such as a spouse,…