X-Force December 12, 2021

How Log4j Vulnerability Could Impact You

4 min read - Get the latest on the vulnerability dubbed "Log4Shell," a remote code execution vulnerability.

October 14, 2019

New BitPaymer Ransomware Campaign Exploits Apple Zero-Day Vulnerability

2 min read - Researchers detected a new BitPaymer ransomware campaign that exploited an Apple zero-day vulnerability to target Windows users.

July 15, 2019

Weekly Security News Roundup: Zero-Day Vulnerability Exploited in Buhtrap Attack Campaign

3 min read - Last week, security researchers identified a zero-day vulnerability that was instrumental in a targeted attack against companies in Eastern Europe.

June 27, 2019

Sodinokibi Ransomware Adds Malvertising and More Exploit Kits to Distribution Methods

2 min read - Sodinokibi ransomware affiliates have added malvertising campaigns to the growing list of attack vectors used to infect victims, according to reports.

May 28, 2019

Sodinokibi Ransomware Fixes Scaling Issues, Targets Large Enterprises

2 min read - Recent variants of Sodinokibi accounted for scaling issues as the ransomware family steadily moves to target large enterprises.

Application Security June 25, 2018

How to Prioritize Security Vulnerabilities in SecDevOps

3 min read - What's the first step toward prioritizing security vulnerabilities? Know which open source components developers use in their code and monitor them for alerts using SAST tools.

Intelligence & Analytics May 30, 2018

The Hack React: Testing a SOC Director’s Cybersecurity Incident Response

5 min read - When Lincoln Healthcare experiences a watering hole attack, security operations center (SOC) director Malcolm Gerhard is tasked with developing a swift cybersecurity incident response. Will he succeed?

May 17, 2018

Cybersecurity Threats in 2018: Cryptojacking, Ransomware and a Divided Zero-Day Market

2 min read - The first quarter of 2018 saw a rise in cybersecurity threats such as ransomware, Internet of Things (IoT) vulnerabilities and zero-day threats.

February 5, 2018

Are You Affected by the Next Zero-Day?

4 min read - With the new Am I Affected button, IBM QRadar users are quickly notified of any indicators of a zero-day vulnerability captured within X-Force Exchange collections.

Software Vulnerabilities October 17, 2017

Don’t Just Put Out the Zero-Day Fire — Get Rid of the Fuel

5 min read - The best way to remediate zero-day threats is to focus on proactively assessing and patching the vulnerabilities that facilitate them.