May 1, 2019

DDoS Botnet Targeting Electrum Servers Grows to 152,000 Infected Hosts

2 min read - A DDoS botnet targeting servers used by the Electrum bitcoin wallet reached 152,000 infected hosts at the end of April.

March 19, 2019

Researchers Uncover Highly Exploitable WinRAR Bug That Puts 500 Million Users at Risk

2 min read - More than 100 unique exploits of a WinRAR bug have been identified since security researchers discovered a 19-year-old vulnerability in the file compression system.

January 8, 2019

Malvertising Campaign Delivers Vidar Information Stealer and GandCrab Ransomware

2 min read - Researchers have spotted a malvertising campaign that is delivering two payloads to victims: the Vidar information stealer and GandCrab ransomware.

January 8, 2019

NRSMiner Crypto-Mining Malware Infects Asian Devices With the Help of EternalBlue Exploit

2 min read - Security researchers report that the newest version of NRSMiner crypto-mining malware is causing problems for companies that haven't patched the EternalBlue exploit.

January 2, 2019

New Variant of Mirai Malware Exploits Weak IoT Device Passwords to Conduct Brute-Force Attacks

2 min read - Security researchers discovered a new variant of Mirai malware known as Miori that is targeting internet of things (IoT) devices to integrate into a larger botnet.

December 14, 2018

Hide ‘N Seek Botnet Continues to Grow by Infecting IoT Devices Using Default Credentials

2 min read - Avast security analysts reported that the Hide 'N Seek botnet continues to grow by infecting vulnerable Internet of Things (IoT) devices still using their default passwords.

November 20, 2018

WordPress Exploit in GDPR Plugin Puts 100,000 Websites at Risk

2 min read - Researchers discovered a WordPress Exploit in a plugin designed to help site owners comply with the GDPR that enables attackers to take control of admin accounts.

October 16, 2018

KeyBoy Attacker Group Uses Publicly Available Exploit Code to Deliver Malware

2 min read - The KeyBoy attacker group recently used known exploit code for two Microsoft security flaws to infect machines with TSSL and Titan Android malware, according to AlienVault.

September 19, 2017

The Telltale Text File: Security Researcher Proposes Standardization for Reporting Vulnerabilities

2 min read - Security researcher Ed Foudil proposed adding a security.txt to every website to standardize the process of reporting vulnerabilities.

Advanced Threats September 14, 2017

Downward Trend in Publicly Available Exploit Code? Don’t Ease Up on Patch Management Just Yet

5 min read - IBM X-Force reported a downward trend in publicly available exploit code, but security teams must still prioritize vulnerability and patch management.