Data Protection November 7, 2019

How to Start Building an Insider Threat Program

3 min read - Sometimes it only takes one moment, one life-changing incident, to turn the most trustworthy employee into an insider threat.

Malware July 9, 2019

Taking Over the Overlay: Reconstructing a Brazilian Remote Access Trojan (RAT)

4 min read - IBM X-Force researchers detected, reverse engineered, reconstructed and simulated a Delphi-based Brazilian remote access Trojan.

June 19, 2019

TCP SACK Panic Flaw Could Compromise Production Linux Machines

2 min read - A kernel flaw dubbed TCP SACK Panic could allow remote attackers to compromise organizations running large fleets of production Linux computers, according to a series of security advisories.

Software Vulnerabilities June 18, 2019

Critical RCE Vulnerability in TP-Link Wi-Fi Extenders Can Grant Attackers Remote Control

5 min read - IBM X-Force discovered a zero-day remote code execution vulnerability in TP-Link Wi-Fi extenders that could enable an attacker to command a device.

June 3, 2019

New HiddenWasp Linux Malware Focused Solely on Achieving Targeted Remote Control

< 1 min read - A new threat called HiddenWasp is different from other Linux malware in that it's focused solely on achieving targeted remote control of infected hosts.

May 21, 2019

Phishing Campaign Delivers Multi-Feature, Open-Source Babylon RAT

2 min read - Researchers spotted a phishing campaign delivering a multi-feature, open-source remote administration tool known as Babylon RAT.

April 23, 2019

New DLL CryptoMix Ransomware Reportedly Using Remote Desktop Services for Installation

2 min read - Security researchers discovered that a new DLL CryptoMix ransomware variant is reportedly using Windows Remote Desktop Services (RDS) to install itself on unsuspecting users' machines.

April 18, 2019

Attackers Compromise Admin Account to Infect Manufacturing Company With BitPaymer Ransomware

2 min read - Threat actors compromised an account with administrator privileges to infect a manufacturing company with BitPaymer ransomware.

Software Vulnerabilities April 8, 2019

Buffer Overflow Vulnerability in TP-Link Routers Can Allow Remote Attackers to Take Control

9 min read - IBM X-Force found a zero-day buffer overflow vulnerability in one of the most common routers on the market that could let malicious third parties take control of the device from a remote location.

Banking & Finance April 4, 2019

How a Cunning Remote Overlay Malware Met Its Match

4 min read - A remote overlay malware that is attacking Latin American banks met its match in a solution built from behavioral biometrics, deep research, reverse engineering and finely tuned threat modeling.