CISA adds Microsoft SharePoint vulnerability to the KEV Catalog

January 15, 2020

Cable Haunt Leaves an Estimated 200 Million Modems Open to Potential Attacks

2 min read - An estimated 200 million modems or more may be vulnerable to an exploit dubbed Cable Haunt, which researchers said would give attackers complete control over their victims' devices.

January 14, 2020

Australian Bushfires Donation Website Compromised by Magecart Credit Card Skimming Attack

2 min read - A website set up to collect donations for the Australian bushfires suffered a Magecart credit card skimming attack.

January 14, 2020

Microsoft Sway Domains Used in Phishing Campaigns to Create Bogus Landing Pages

2 min read - A phishing technique that makes use of Microsoft Sway could attack organizations even if they don't use the tool, security researchers warn.

January 13, 2020

Weekly Security News Roundup: Mirai-Inspired ‘LiquorBot’ Botnet Mining for Monero

3 min read - Researchers discovered that the Mirai-inspired "LiquorBot" IoT botnet came equipped with Monero cryptocurrency mining capabilities. Read on to learn what else happened last week in security news.

January 7, 2020

Pulse VPN Bug Means ‘Big Game Ransomware’ Could Access Corporate Networks

2 min read - Large organizations may be targeted by "big game ransomware" if they risk leaving a vulnerability in Pulse Secure virtual private network (VPN) servers unpatched, a cybersecurity researcher warned.

January 7, 2020

Malware Authors Make DeathRansom a Proper Crypto-Ransomware Family

2 min read - Security researchers observed that malware authors have made DeathRansom a proper crypto-ransomware family capable of encrypting victims' files.

January 6, 2020

Colorado Town Loses More Than $1 Million to a BEC Scam

2 min read - A Colorado town lost more than $1 million in a BEC scam after mistakenly transferring the money to digital fraudsters.

January 6, 2020

Attackers Invent New Evasion Techniques to Conceal Web Skimmer Activity

2 min read - Digital attackers invented two new evasion techniques that they can use to help conceal the activity of a client-side web skimmer.

January 6, 2020

Weekly Security News Roundup: Maritime Facility Struck by Ryuk Ransomware

2 min read - The U.S. Coast Guard revealed that a maritime facility suffered an infection at the hands of the Ryuk ransomware family. Learn what else happened last week in security news.

December 30, 2019

Weekly Security News Roundup: Emotet Unveils New Attacks, C&C URI Structure

3 min read - Researchers observed Emotet ringing out 2019 with a new command-and-control (C&C) URI structure and at least two new attack campaigns. Learn what else happened last week in security news.