Collaborate Disseminate
File-encrypting ransomware programs have become one of the biggest threats to corporate networks worldwide and are constantly evolving by adding increasingly sophisticated detection-evasion and propagation techniques.In a world where any self-respec… Continue reading Machine learning could help companies react faster to ransomware
Many companies protect their brands by registering domain names that are slight variations on their own, but manufacturers of industrial control systems don’t seem to have followed suit, potentially leaving customers open to attack.Researchers from … Continue reading Industrial control systems vendors get careless about domain squatting
Many companies protect their brands by registering domain names that are slight variations on their own, but manufacturers of industrial control systems don’t seem to have followed suit, potentially leaving customers open to attack.Researchers from … Continue reading Industrial control systems vendors get careless about domain squatting
Many organizations that run industrial control systems strive to isolate them from the Internet, but sometimes forget to disallow Domain Name System (DNS) traffic, which provides a stealthy way for malware to exfiltrate data.Sometimes referred to as… Continue reading When you isolate your industrial control systems don’t forget about DNS
Attackers are abusing the Windows Background Intelligent Transfer Service (BITS) to re-infect computers with malware after they’ve been already cleaned by antivirus products.The technique was observed in the wild last month by researchers from Secur… Continue reading Check your BITS, because deleting malware might not be enough
There were 19 distributed denial-of-service (DDoS) attacks that exceeded 100 Gbps during the first three months of the year, almost four times more than in the previous quarter.
Even more concerning is that these mega attacks, which few companies c… Continue reading Massive DDoS attacks reach record levels as botnets make them cheaper to launch
The June batch of Android security patches addresses nearly two dozen vulnerabilities in system drivers for various hardware components from several chipset makers.
The largest number of critical and high severity flaws were patched in the Qualcomm… Continue reading Android gets patches for serious flaws in hardware drivers and media server
Over the past few days, attackers have been exploiting an unpatched vulnerability in WP Mobile Detector, a WordPress plug-in installed on over 10,000 websites.The plug-in’s developer fixed the flaw Tuesday in version 3.6, but in addition to updating… Continue reading A new WordPress plug-in exploit endangers thousands of websites
Researchers have found a malware program that was designed to manipulate supervisory control and data acquisition (SCADA) systems in order to hide the real readings from industrial processes.The same technique was used by the Stuxnet sabotage malwar… Continue reading Mysterious malware targets industrial control systems, borrows Stuxnet techniques
Ransomware authors are not the only cybercriminals who use extortion tactics to make money from users and companies. Data thieves are also increasingly resorting to intimidation.The FBI’s Internet Crime Complaint Center (IC3) has received many repor… Continue reading Extortion schemes expand, threatening consumers and businesses with data leaks