Common Vulnerabilities and Exposures (CVE) Stories - Page 21

Global Stories

Common Vulnerabilities and Exposures (CVE) stories

Most wanted malware Dridex remains in top position amidst global surge in ransomware attacks

The Dridex trojan remains the most prevalent malware, often used in the initial stages of ransomware attacks, says Check Point Research.

By Shannon Williams • 5 min read • Fri, 14th May 2021

Firewalls

A look at the MS Exchange zero-days and how to protect your business

Every organisationusing Microsoft Exchange must patch their on-premise servers immediately and scan their networks for signs of malicious activity.

By Sara Barker • 3 min read • Thu, 29th Apr 2021

Microsoft

Kaspersky discovers zero-day exploit in Desktop Window Manager

While analysing the CVE-2021-1732 exploit, Kaspersky experts found another such zero-day exploit and reported it to Microsoft.

By Shannon Williams • 3 min read • Mon, 19th Apr 2021

Manufacturing

Claroty discovers vulnerabilities in Ovarro TBox RTUs

Widespread vulnerabilities have been found in Ovarro's TBox remote terminal units, posing a threat to industrial facilities.

By Staff Writer • 2 min read • Tue, 30th Mar 2021

Malware

IoT botnets: Perspectives from a residential router

Surprisingly, a vast volume of malicious traffic can reach a residential device, writes Radware head of research Daniel Smith.

By Daniel Smith • 4 min read • Tue, 23rd Mar 2021

Malware

Almost a third of malware threats previously unknown - HP report

New report reveals that 29% of malware captured was previously unknown due to attackers using packers and obfuscation techniques.

By Shannon Williams • 5 min read • Tue, 23rd Mar 2021

IoT Security

Research reveals increase in critical, low complexity vulnerabilities

Critical and low complexity vulnerabilities are on the rise, with over 10,000 logged in 2020, according to a new study by Redscan.

By Shannon Williams • 3 min read • Fri, 19th Feb 2021

Malware

2021's Most Wanted: Emotet continues reign as top malware threat

The Emotet trojan continues to reign as top malware in January, despite international law enforcement taking control of its infrastructure.

By Shannon Williams • 4 min read • Wed, 17th Feb 2021

Security vulnerabilities

Vulnerability disclosures back to expected rates despite COVID-19 disruption

Vulnerability disclosures are returning to normal levels, with 2020 on track to surpass 2019, according to a report by Risk Based Security.

By Shannon Williams • 2 min read • Tue, 16th Feb 2021

Firewalls

Sophos unearths origin of prominent cryptominer

The cryptominer was recently discovered when attackers targeted internet-facing database servers (SQL servers), and the MrbMiner was downloaded and installed.

By Staff Writer • 3 min read • Fri, 22nd Jan 2021

Open source

Check Point uncovers live Linux attack, urges users to take action

Ongoing cyber attacks targeting Linux systems have been discovered, with users urged to patch their systems immediately, warns Check Point Research.

By Catherine Knowles • 3 min read • Wed, 20th Jan 2021

Firewalls

Sophos named a Numbering Authority in CVE programme

Sophos has become a Numbering Authority in the Common Vulnerabilities and Exposures programme, enabling it to assign CVE identification to its own products.

By Nick Forrester • 3 min read • Tue, 19th Jan 2021

Virtual Private Networks

22 billion records exposed from breaches in 2020 — report

The research also found that 35% of the breaches recorded by Tenable were caused by ransomware attacks, while 14% of breaches stemmed from email compromises.

By Staff Writer • 3 min read • Fri, 15th Jan 2021

Malware

Emotet remains leading malware in global threat index

The malware has impacted 7% of organisations globally, following a spam campaign which targeted more than 100,000 users per day during the holiday season.

By Shannon Williams • 4 min read • Mon, 11th Jan 2021

Marketing Technologies

GitHub hosts more than 56 million developers in 2020

GitHub's 2020 State of the Octoverse report reveals the latest trends in developer activity, including top languages and security vulnerabilities.

By Staff Writer • 3 min read • Mon, 7th Dec 2020

DataCentre infrastructure

Claroty finds four vulnerabilities in Schneider Electric OT device

Unmitigated vulnerabilities could give an attacker access to the device, enabling the attacker to break encryption, modify code, and run certain commands.

By Staff Writer • 3 min read • Thu, 19th Nov 2020