Network June 23, 2023

Easy configuration fixes can protect your server from attack

4 min read - In March 2023, data on more than 56,000 people — including Social Security numbers and other personal information — was stolen in the D.C. Health Benefit Exchange Authority breach. The online health insurance marketplace hack exposed the personal details of Congress…

Zero Trust June 3, 2020

It’s Time to Take a Fresh Look at Zero Trust

3 min read - A convergence of trends and technologies is making Zero Trust an increasingly necessary cybersecurity strategy.

May 5, 2020

LockBit Ransomware Performs Targeted Attacks With Automated Distribution

2 min read - Security researchers observed the LockBit ransomware leveraging brute-force techniques and evasion-based tactics to perform targeted attacks.

September 9, 2019

Lilocked Ransomware Infects Thousands of Linux Servers to Encrypt Files

2 min read - A new family of ransomware called Lilocked (or Lilu) infected thousands of web servers and encrypted their files.

July 10, 2019

Zoom Vulnerability Could Let Third Parties Take Over Webcams

2 min read - A zero-day Zoom vulnerability could allow third parties to snoop on videoconferencing calls, reactivate uninstalled apps and conduct other malicious activities.

April 9, 2019

Web Servers Used to Host 10 Malware Families Distributed via Phishing Emails

2 min read - Digital attackers used more than a dozen web servers to host 10 malware families and distributed those threats using phishing emails.

October 2, 2017

Malware Mines Monero on Vulnerable Servers

2 min read - Security researchers reported that threat actors have been targeting vulnerable servers to mine for cryptocurrency since about May 2017.

June 20, 2017

Hidden PHP Rootkits Unearthed, Putting Apache Modules at Risk

2 min read - A security researcher discovered how to create malicious Apache modules, giving cyberattackers a new way to tap into and control web servers.

Software Vulnerabilities March 6, 2017

Cheap Shock: Why Shellshock Is Still a Thing

2 min read - Although security researchers discovered Shellshock more than two years ago, it remains popular among fraudsters with basic skill sets and light wallets.

October 25, 2016

Critical Condition: Open Rsync Server Puts EMS System in Harm’s Way

2 min read - Cybercriminals prefer the easy way in, like a server with default username/password combinations or a software flaw. In the case of the Guilford County, North Carolina Emergency Medical Services (EMS) Department, the open Rsync server that manages system updates opened…