Skip to main content

Security News

Filter by:

ProxyShell Attacks Pummel Unpatched Exchange Servers

CISA is warning about a surge of ProxyShell attacks, as Huntress discovered 140 webshells launched against 1,900 unpatched Microsoft Exchange servers.
Threatpost 24 Aug 2021 548 Views

Windows 10 Admin Rights Gobbled by Razer Devices

So much for Windows 10's security: A zero-day in the device installer software grants admin rights just by plugging in a mouse or other compatible device. UPDATE: Microsoft is investigating.
Threatpost 23 Aug 2021 450 Views

How Ready Are You for a Ransomware Attack?

Oliver Tavakoli, CTO at Vectra, lays out the different layers of ransomware defense all companies should implement.
Threatpost 20 Aug 2021 638 Views

Bogus Cryptomining Apps Infest Google Play

The apps attempt to swindle users into buying in-app upgrades or clicking on masses of ads.
Threatpost 19 Aug 2021 545 Views

T-Mobile: >40 Million Customers’ Data Stolen

Attackers stole tens of millions of current, former or prospective customers' personal data, the company confirmed. It's providing 2 years of free ID protection.
Threatpost 19 Aug 2021 602 Views

Bug in Millions of Flawed IoT Devices Lets Attackers Eavesdrop

A remote attacker could exploit a critical vulnerability to eavesdrop on live audio & video or take control. The bug is in ThroughTek’s Kalay network, used in 83m devices.
Threatpost 18 Aug 2021 560 Views

Fortinet slams Rapid7 for disclosing vulnerability before end of 90-day window

Fortinet said it would be releasing a patch by the end of the week.
ZDnet 18 Aug 2021 764 Views

LockBit 2.0 Ransomware Proliferates Globally

Fresh attacks target companies' employees, promising millions of dollars in exchange for valid account credentials for initial access.
Threatpost 18 Aug 2021 609 Views

Unpatched Fortinet Bug Allows Firewall Takeovers

Packet Storm 18 Aug 2021 16399 Views

Colonial Pipeline sends breach letters to more than 5,000 after ransomware group accessed SSNs, more

Colonial Pipeline said the leaks involved the personal information of current and former employees.
ZDnet 17 Aug 2021 698 Views