The Gift That Keeps on Giving: PCI Compliance for Post-Holiday Season Returns
Holiday spending is on the rise both in-store and online. How can retailers ensure PCI compliance to manage large transaction volumes and post-holiday refunds?
New Variant of Mirai Malware Exploits Weak IoT Device Passwords to Conduct Brute-Force Attacks
Security researchers discovered a new variant of Mirai malware known as Miori that is targeting internet of things (IoT) devices to integrate into a larger botnet.
Why You Need a BGP Hijack Response Plan
BGP hijack attacks are increasing in popularity, but are still largely unaddressed in many organizational incident response plans.
Latest Malware Strains Target Cloudera Hadoop for Bitcoin Mining and DDoS Attacks
Security researchers discovered that several new malware strains are targeting known Cloudera Hadoop vulnerabilities for bitcoin mining and distributed denial-of-service (DDoS) purposes.
5 More Retail Cybersecurity Practices to Keep Your Data Safe Beyond the Holidays
These five retail cybersecurity tips will help organizations mitigate cyberattacks and provide customers with the safest shopping experience during the holiday season.
Easy Does It! A Timely Look Into Fraud TTPs in the Brazilian Financial Cybercrime Landscape
In this first article of a two-part series, IBM X-Force exposes some of its research on the typical malware and tactics, techniques and procedures (TTPs) used in Brazilian financial cybercrime.
DemonBot Targeting Hadoop Clusters to Perform DDoS Attacks
Security researchers reported that a new bot called DemonBot is targeting Hadoop clusters to execute distributed denial-of-service (DDoS) attacks.
Cybercriminals Distribute TimpDoor Malware to Turn Android Devices Into Network Proxies
The TimpDoor malware family enables cybercriminals to turn infected Android devices into network proxies without users' knowledge.
Chalubo Bot Family Launches Distributed Denial-of-Service Attacks Against Linux Systems
Researchers discovered a family of bots dubbed Chalubo launching distributed denial-of-service (DDoS) attacks to brute-force Linux-based systems running internet-facing SSH servers.
Threat Actors Prey on Drupalgeddon Vulnerability to Mass-Compromise Websites and Underlying Servers
X-Force observed attackers using known Drupal vulnerabilities, including Drupalgeddon, to target websites and the underlying infrastructure that hosts them, leveraging Shellbot to open backdoors.