July 2, 2019

Phishing Attacks Incorporate QR Codes to Help Evade URL Analysis

2 min read - Security researchers noticed fraudsters incorporating QR codes into various phishing attack campaigns as a way to evade URL analysis.

June 27, 2019

Sodinokibi Ransomware Adds Malvertising and More Exploit Kits to Distribution Methods

2 min read - Sodinokibi ransomware affiliates have added malvertising campaigns to the growing list of attack vectors used to infect victims, according to reports.

Endpoint June 25, 2019

Is Your Endpoint Protection Strategy Ready for 5G?

5 min read - If you accept that 5G technology comes with three inherent challenges — manageability, the supply chain and usage — then the endpoint protection challenge makes a whole lot more sense.

June 17, 2019

XENOTIME Threat Group Now Targeting Electric Utility Organizations

2 min read - In addition to oil and gas companies, the XENOTIME threat group has begun targeting electric utility organizations located in the U.S. and elsewhere.

Application Security May 30, 2019

When AV Software Is at War With Your OS: A Case of IT Complexity

3 min read - When AV software programs are designed independently, it is only natural that there is competition for resources in the zero-sum field in which they are playing.

Energy & Utility April 25, 2019

Industrial Control Systems Security: To Test or Not to Test?

6 min read - According to X-Force Red data, the number of vulnerabilities exposing industrial control systems has increased 83 percent since 2011. Should organizations test them and risk destabilizing operations?

Intelligence & Analytics April 23, 2019

How IBM X-Force IRIS Prepared for the Ukraine Election

7 min read - Before the first round of the Ukraine election in March, we decided that we couldn't afford to sit on our heels until an attack was launched.

April 9, 2019

Web Servers Used to Host 10 Malware Families Distributed via Phishing Emails

2 min read - Digital attackers used more than a dozen web servers to host 10 malware families and distributed those threats using phishing emails.

March 19, 2019

Threat Actors Use Fake Copyright Infringement Notifications in Instagram Hacking Campaign

2 min read - Security researchers discovered that attackers are using fake copyright infringement notifications as part of a recent Instagram hacking campaign.

Intelligence & Analytics March 12, 2019

An Apple a Day Won’t Improve Your Security Hygiene, But a Cyber Doctor Might

4 min read - Internal assessments and audits are necessary, but they have their limitations. Some outside assistance could help improve your security hygiene and inoculate you from the nastiest of cyber bugs.