Threats
-
Photo illustration by Danielle Ternes/Cybersecurity Dive; photograph by yucelyilmaz via Getty Images
Federal agencies warn of ransomware targeting water, wastewater treatment plants
Months after the attack on a Florida water treatment plant, the FBI, CISA and other agencies are concerned about a new round of threats to vulnerable municipal sites.
By David Jones • Oct. 18, 2021 -
Dan Kitwood/Getty Images News via Getty Images
2021 ransomware bitcoin activity eclipses last year, Treasury finds
The number of suspicious activity report transactions is already up 30% over 2020 numbers and the agency has tracked billions of dollars in outgoing bitcoin payments potentially linked to ransomware.
By Samantha Schwartz • Oct. 18, 2021 -
sestovic/E+/Getty via Getty Images
Cybersecurity tool sprawl leading to burnout, false positives: report
Security operations teams are wasting time on false alerts due to managing a high number of tools that don't interact well with each other, Trend Micro found.
By David Jones • Oct. 13, 2021 -
Carl Court via Getty Images
Insider threat environment faces challenges amid changing corporate landscape
As remote work becomes permanent and employee turnover rises, companies face additional challenges in protecting sensitive data, according to a panel discussion at Mandiant Cyber Defense Summit.
By David Jones • Oct. 06, 2021 -
Markus Spiske
NIST urges supply chain to include cyber in risk management
Industries that rely heavily on technology are the best at incorporating cyber in their supply chain risk management plans, according to NIST's Jon Boyens.
By Samantha Schwartz • Oct. 05, 2021 -
Drew Angerer via Getty Images
REvil, DarkSide highlight surge in Q2 ransomware attacks: report
The government sector saw more ransomware attacks, while financial services companies faced increased threats in the cloud, according to McAfee Enterprise research.
By David Jones • Oct. 04, 2021 -
Photo illustration by Danielle Ternes/Cybersecurity Dive; photograph by yucelyilmaz via Getty Images
With remote work, any employee could be an insider threat. How is CISA mitigating the risk?
CISA released a self-assessment tool which organizations can use to generate reports on their tolerance and capabilities for preventing insider threats.
By Samantha Schwartz • Sept. 30, 2021 -
Jeenah Moon via Getty Images
Deep DiveMicrosoft, under attack from threat actors, positions itself as cyber guardian
The pandemic created more business opportunity, but malicious actors dogged the company's technology stack. Now, the very same products touted as security defense tools are under fire.
By David Jones • Sept. 29, 2021 -
Sean Gallup via Getty Images
Microsoft warns of new credential-stealing backdoor from SolarWinds threat actor
The newly identified malware, called FoggyWeb, has been observed since April and is used to steal from compromised AD FS servers.
By David Jones • Sept. 28, 2021 -
Sean Gallup via Getty Images
Ransomware compromises customer data in farm co-op attack
A Minnesota-based co-op became the second agricultural firm in recent days to be the target of ransomware, just weeks after the FBI and CISA warned of a wider threat to the industry.
By David Jones • UPDATED: Sept. 24, 2021 at 6:59 p.m. -
Photo illustration by Danielle Ternes/Cybersecurity Dive; photograph by yucelyilmaz via Getty Images
After 400 attacks, feds warn of Conti ransomware
Nearly a year after U.S. security agencies warned the healthcare sector about Ryuk, the same threat actors are reemerging as a risk to businesses.
By Samantha Schwartz • Sept. 23, 2021 -
Enterprises plan major investments as remote work escalates security risk: report
Companies face significant challenges in managing security as the work-from-home model moves from an emergency stopgap to a more permanent environment.
By David Jones • Sept. 22, 2021 -
Chip Somodevilla via Getty Images
Treasury sanctions crypto exchange Suex in push to thwart ransomware
While more legal measures await international cybercrime, the government is sending interim messages to ransomware gangs.
By Samantha Schwartz • Sept. 22, 2021 -
Joe Raedle via Getty Images
Fortinet credential drop linked to fissure in ransomware group
Researchers linked a new ransomware syndicate called Groove to the Fortinet VPN credential dump, following a rift involving affiliates of Babuk.
By David Jones • Sept. 10, 2021 -
Photo illustration by Danielle Ternes/Cybersecurity Dive; photograph by yucelyilmaz via Getty Images
Ransomware capitalizes on holiday weekends. Feds urge vigilance over Labor Day
The FBI and CISA implored companies and agencies to backup data and use proactive threat-hunting measures to mitigate any potential attacks.
By David Jones • Sept. 01, 2021 -
Leon Neal via Getty Images
What's at stake in a credential stuffing attack
Attackers gain a network foothold by using stolen credentials under the guise of an authenticated trusted employee or third party.
By Sue Poremba • Sept. 01, 2021 -
gopixa via Getty Images
OpinionTime to be less dramatic about ransomware
Security is an aspect of normal operations. Proactive, broad measures can mitigate the risk of whatever threat is currently present or yet to come.
By Patricia Muoio • Aug. 31, 2021 -
Drew Angerer via Getty Images
Facility management worried about OT cybersecurity, but few plan to fix it
Seven in 10 managers are concerned about having adequate levels of cybersecurity, but only one-third are planning new investments, Honeywell found.
By David Jones • Aug. 27, 2021 -
Sean Gallup via Getty Images
More threats target Linux, a foundation for the cloud, report finds
As enterprises embrace cloud, malicious actors are finding sophisticated methods to threaten users for computing power and data theft.
By David Jones • Aug. 25, 2021 -
Amilcar Orfali / Stringer via Getty Images
Insider risk surges as resignations mount
Millions of U.S. workers are walking away from existing jobs, increasing the risk to corporate data and, in many cases, source code.
By David Jones • Aug. 13, 2021 -
Patrick Lux via Getty Images
Is XDR the next best security solution?
SOCs are still learning about extended detection and response and how to apply it to an existing security stack. But when properly deployed, it's an asset for incident response.
By Samantha Schwartz • Aug. 11, 2021 -
Jeenah Moon via Getty Images
APT actors target Microsoft 365 using novel techniques
Nation states are combining old techniques with newer methods to establish persistence and steal valuable data from organizations.
By David Jones • Aug. 06, 2021 -
Tomohiro Ohsumi via Getty Images
Initial access brokers sell a way in, widening the ransomware market
The most popular network access points sold on the dark web offer insight for security teams to better understand what is most vulnerable to ransomware.
By Samantha Schwartz • Aug. 02, 2021 -
Sean Gallup via Getty Images
OT cyberattacks could threaten human safety by 2025: Gartner
Critical infrastructure facilities are struggling to contain sophisticated malware and ransomware threats, Gartner research shows.
By David Jones • July 26, 2021 -
Sean Gallup via Getty Images
Why cybersecurity keeps payments executives up at night
Payments are a critical part of the nation's infrastructure, so executives in the industry are under pressure to understand the evolving threat landscape.
By Mercedes Cardona • July 21, 2021
