Vulnerability: Page 21
-
Ross D. Franklin/AP
Sports betting apps fumble open source, placing users at risk
On the cusp of Super Bowl 57, researchers from Synopsys warned popular mobile betting apps face a higher than average risk of being hacked.
By David Jones • Feb. 7, 2023 -
Getty Images
Ransomware attack spree hits thousands of VMware servers
Cyber authorities linked the attacks, dubbed ESXiArgs, to a two-year-old VMware vulnerability. At least 2,250 machines have been compromised.
By Matt Kapko • Feb. 6, 2023 -
Getty Images
CVEs expected to rise in 2023, as organizations still struggle to patch
Most CVEs are exploited within 30 days of public disclosure, a Coalition report found, spelling trouble for organizations trying to shore up their defenses.
By David Jones • Feb. 3, 2023 -
Scott Olson via Getty Images
Industrial organizations may worry too much about ICS vulnerabilities
The pressure to constantly patch is more likely to damage industrial plants, Dragos CEO Robert M. Lee said.
By Matt Kapko • Jan. 27, 2023 -
Getty Images
Exchange Server under pressure as opportunistic actors step up attacks
Bitdefender Labs warns threat actors are using the ProxyNotShell/OWASSRF exploit chains to launch attacks.
By David Jones • Jan. 25, 2023 -
Getty Images
Almost half of critical manufacturing organizations face significant risk of data breach
A report presented at the World Economic Forum shows key sectors are under pressure from rising vulnerabilities and a slower rate of patching.
By David Jones • Jan. 23, 2023 -
Getty Images
Four Microsoft Azure services found vulnerable to server-side request forgery
Researchers from Orca Security said no authentication was required in two of the four instances.
By David Jones • Jan. 17, 2023 -
Getty Images
Citrix flaw exploited in ransomware attack against small US business
Threat actors linked to ransomware group Royal are actively exploiting a vulnerability in two Citrix products, researchers found.
By David Jones • Jan. 13, 2023 -
themotioncloud via Getty Images
Open-source repository risk amplified on GitHub
Inconsistent or delayed code commits create risk as repositories age, Veracode research found.
By Matt Kapko • Jan. 12, 2023 -
Getty Images
CISA adds Exchange Server, Windows vulnerabilities to catalog of exploited CVEs
The Exchange Server vulnerability was linked to a December ransomware attack against Rackspace.
By David Jones • Jan. 11, 2023 -
Getty Images
Rackspace confirms ransomware attack hit a small percentage of its Hosted Exchange customers
The cloud services firm said an investigation found no evidence the attackers read, misused or disseminated customer data or emails.
By David Jones • Jan. 6, 2023 -
Courtesy of Rackspace Technology
Rackspace identifies ransomware threat actor behind December attack via Exchange
CrowdStrike previously connected Play, the threat actor, to a new Outlook Web Access exploit method used in multiple attacks.
By David Jones • Jan. 3, 2023 -
Getty Images
Cybersecurity trends in 2023 that will directly impact everyday life
The scale of cyberthreats are growing, spilling into the mainstream. In 2023, expect the spotlight to add pressure to businesses that have underinvested in security.
By Sue Poremba • Jan. 3, 2023 -
Jeenah Moon via Getty Images
New exploit for Microsoft’s ProxyNotShell mitigation side steps fix
CrowdStrike researchers discovered a new attack method by the Play ransomware actors that uses Outlook Web Access and leverages additional tools to maintain access.
By David Jones • Dec. 22, 2022 -
Getty Images
MacOS vulnerability allows threat actors to bypass Apple Gatekeeper
Microsoft researchers found a flaw in macOS systems, which can even overcome security features designed to protect high-risk users in Lockdown Mode.
By David Jones • Dec. 20, 2022 -
Justin Sullivan/Getty Images via Getty Images
Threat actor exploits critical Citrix vulnerability
CISA and the NSA quickly issued advisories on the vulnerability, underscoring evidence that a threat actor, active for at least 15 years, is exploiting the flaw.
By Matt Kapko • Dec. 13, 2022 -
Getty Images
Fortinet urges customers to upgrade systems amid critical vulnerability
A heap-based buffer overflow vulnerability has been exploited in the wild and could allow an attacker to gain control of a system.
By David Jones • Dec. 13, 2022 -
Getty Images
Fear, panic and Log4j: One year later
Fears of catastrophic cyberattacks have thus far failed to materialize. But federal authorities stress threat actors are playing the long game.
By David Jones • Dec. 9, 2022 -
Jeenah Moon via Getty Images
Internet Explorer is still a viable zero-day attack vector
North Korea-linked threat actors are using a technique that has been widely used to exploit Internet Explorer via Office files since 2017, Google found.
By Matt Kapko • Dec. 7, 2022 -
Getty Images
Three-quarters of retail, hospitality applications have security flaws
Nearly 1 in 5 vulnerabilities in the retail and hospitality industry are considered high severity, Veracode found, creating considerable risks to the organization.
By David Jones • Nov. 22, 2022 -
Getty Images
Iran-linked threat actors exploiting Log4Shell via unpatched VMware, feds warn
The actors compromised a federal civilian agency, CISA and the FBI said. Authorities warned VMware users to assume breach and hunt for threats if they skipped patches or workarounds.
By David Jones • Nov. 16, 2022 -
Getty Images
High risk, critical vulnerabilities found in 25% of all software applications and systems
Research from Synopsys showed weak SSL/TLS configurations were the most prevalent form of vulnerability.
By David Jones • Nov. 15, 2022 -
Getty Images
CISA wants to change how organizations prioritize vulnerabilities
Federal authorities want to take the guesswork and manual decision making processes out of the messy world of vulnerabilities.
By Matt Kapko • Nov. 14, 2022 -
Getty Images
CISA warns unpatched Zimbra users to assume breach
Months after warnings to patch the Zimbra Collaboration Suite, government and private sector organizations are under attack from multiple threat actors.
By David Jones • Nov. 11, 2022 -
Getty Images
Citrix CVEs need urgent security updates, CISA says
Though there's no active exploitation yet, Tenable researchers warn they expect threat actors to target the Citrix systems in the near term.
By David Jones • Nov. 10, 2022
Previous
