CISA adds Microsoft SharePoint vulnerability to the KEV Catalog

December 23, 2019

Weekly Security News Roundup: Exposed Credit Card Details Abused Within 2 Hours

3 min read - A researcher found that malicious actors had abused the details of a test credit card just two hours after he had posted the information online. Learn what else happened last week in security news.

December 17, 2019

Nearly a Quarter of a Million RSA Keys Broken Using Certificate Vulnerability

2 min read - Almost 250,000 RSA keys were found to be broken as part of an investigation into a certificate vulnerability that could compromise IoT devices such as connected cars and medical implants.

December 17, 2019

Study: 3 in 4 Users Required a Reset of a Forgotten Password in the Last 90 Days

2 min read - A new study found that most users required a password reset in the last 90 days due to a forgotten password.

December 16, 2019

High-Profile Users in the US and Europe Targeted by Zeppelin Ransomware

2 min read - Researchers observed the Russian-based Zeppelin ransomware targeting high-profile users based in the U.S. and Europe.

December 16, 2019

BuleHero Botnet Uses Multiple Lateral Movement Modules to Drop XMRig Miner, Gh0st RAT

2 min read - The BuleHero botnet was seen using multiple modules to move laterally on a network and increase the spread of its two payloads, the XMRig miner and the Gh0st remote-access Trojan (RAT).

December 16, 2019

Weekly Security News Roundup: Flaw in Attackers’ Ryuk Decryptor Could Hinder Recovery

3 min read - Researchers spotted a flaw in an updated Ryuk ransomware decryptor used by attackers that could limit victims' recovery efforts. Read on to learn what else happened last week in security news.

December 11, 2019

Fake Payroll Emails Used by Phishing Campaign to Deliver TrickBot

2 min read - A phishing campaign is using payroll-themed emails to trick users into inadvertently infecting their machines with TrickBot.

December 11, 2019

HawkEye Keylogger Acts as First-Stage Loader for Cryptocurrency Miner

2 min read - Researchers observed the HawkEye keylogger acting as the first-stage downloader for a cryptocurrency miner in a new phishing campaign.

December 10, 2019

Malicious Office 365 App Leveraged by Phishing Campaign to Access Victims’ Accounts

2 min read - A phishing campaign is using a malicious Microsoft Office 365 app to access victims' accounts without stealing their credentials.

December 10, 2019

Snatch Ransomware Reboots Machines In Safe Mode to Bypass Endpoint Protection

2 min read - The Snatch ransomware reboots infected machines in Safe Mode so that it can bypass endpoint protection and encrypt users' data.