Cyberattacks: Page 2
-
Attackers wield password-spray attacks to zero-in on targets, research finds
The highly effective brute-force attack method requires little effort, Trellix said. Organizations with weak password policies or no MFA are especially at risk.
By Matt Kapko • Nov. 20, 2024 -
Palo Alto Networks customers grapple with another actively exploited zero-day
The security vendor warned of an unconfirmed vulnerability in PAN-OS earlier this month. A CVE entry and patch came 10 days later.
By Matt Kapko • Nov. 19, 2024 -
Trendline
Top 5 stories from Cybersecurity Dive
A wave of rules, regulations and federal action is putting pressure on businesses to shore up security amid a backdrop of emboldened threat actors has a nice ring to it.
By Cybersecurity Dive staff -
AI training vendor iLearningEngines discloses cyberattack in wake of SEC probe
The company said an attacker stole data, misdirected a $250,000 wire payment and deleted emails.
By Matt Kapko • Nov. 19, 2024 -
Palo Alto Networks’ customer migration tool hit by trio of CVE exploits
CISA warned of two critical and actively exploited vulnerabilities in Expedition one week after another CVE came under active exploitation in the same product.
By Matt Kapko • Nov. 15, 2024 -
Feds find ‘broad and significant’ China espionage campaign in US telecom networks
The FBI and CISA warned the nation-state affiliated malicious activities are extensive and include the theft of sensitive call records and court-ordered information.
By Matt Kapko • Nov. 14, 2024 -
5th Circuit dismisses Cargill employee’s Kronos hack, discrimination claims
The decision is also a victory for UKG, whom the employee sued separately for privacy violation allegations stemming from a 2021 ransomware attack.
By Ryan Golden • Nov. 14, 2024 -
Zero-days from top security vendors were most exploited CVEs in 2023
The top five vulnerabilities exploited by attackers last year were found in security gear from Citrix, Cisco and Fortinet, the Five Eyes’ cyber agencies found.
By Matt Kapko • Nov. 13, 2024 -
Critical Veeam CVE targeted by new ransomware variant
Multiple ransomware variants are now targeting the CVE, which has a CVSS of 9.8. For customers, the risk of exploitation is only increasing.
By Matt Kapko • Nov. 12, 2024 -
Grocery giant Ahold Delhaize’s US operations disrupted by cyberattack
The parent company said the disruption forced it to take certain systems offline and affected some pharmacies and e-commerce services.
By Catherine Douglas Moran , Sam Silverstein • Nov. 11, 2024 -
Newpark Resources discloses October ransomware attack
The incident occurred just two months after an attack against oilfield services giant Halliburton.
By David Jones • Nov. 11, 2024 -
Halliburton incurs about $35M in expenses related to August cyberattack
The company said the intrusion forced it to delay billing and collections, but the impact is not considered material.
By David Jones • Nov. 8, 2024 -
Attackers target Palo Alto Networks’ customer migration tool
An actively exploited vulnerability in Expedition allows attackers to achieve admin account takeover. The product reaches end of life in January.
By Matt Kapko • Nov. 8, 2024 -
Microchip Technology reports $21.4M expense from August cyberattack
The chipmaker said the financial impact from the attack was immaterial and largely linked to unscheduled factory outages.
By Matt Kapko • Nov. 7, 2024 -
Columbus, Ohio confirms July ransomware attack compromised data of 500K people
The city notified half a million people their personal information was at risk following the attack it attributed to a foreign threat actor.
By David Jones • Nov. 6, 2024 -
Cyberattacks hit 1 in 3 SMBs last year
Cyber woes for SMBs are exacerbated by a lack of resources to enact advanced security measures, Microsoft Security said in a report.
By Matt Kapko • Nov. 5, 2024 -
Schneider Electric investigating cyber intrusion after threat actor gains access to platform
The French multinational company has been a previous target of ransomware groups.
By David Jones • Nov. 5, 2024 -
CISA warns of foreign threat group launching spearphishing campaign using malicious RDP files
Midnight Blizzard has targeted more than 100 organizations across government, IT and academia, in some cases impersonating Microsoft employees.
By David Jones • Nov. 1, 2024 -
MoneyGram replaces CEO, naming former Walmart executive to the role
The money transfer company named the new CEO just weeks after a cyberattack led to a systemwide shutdown of its services for several days.
By Lynne Marek • Oct. 31, 2024 -
Fortinet finds more malicious IPs linked to widely exploited zero-day
The cybersecurity vendor said the additional indicators of compromise don’t reflect any major changes. Researchers warn thousands of devices remain exposed.
By Matt Kapko • Oct. 31, 2024 -
Cisco warns actively exploited CVE can lead to DoS attacks against VPN services
The company warned the threat activity is linked to previously disclosed brute-force attacks beginning in March.
By David Jones • Oct. 28, 2024 -
Feds probe China-linked attacks on US telecom networks
The government’s public acknowledgment of the China-linked attacks follows a series of warnings about a broad and successful campaign to hack U.S. critical infrastructure.
By Matt Kapko • Oct. 28, 2024 -
SonicWall firewalls the common access point in spreading ransomware campaign
Arctic Wolf Labs researchers said SonicWall firewalls were the initial access point for at least 30 ransomware attacks since August.
By Matt Kapko • Oct. 25, 2024 -
Change Healthcare data breach officially affects 100M people
The breach is the largest ever reported to a portal managed by federal regulators.
By Emily Olsen • Oct. 25, 2024 -
Fortinet zero-day attack spree hits at least 50 customers
Active exploits of a critical vulnerability in FortiManager began in late June, Mandiant said. Firewall credentials and configuration data have been stolen.
By Matt Kapko • Oct. 24, 2024 -
SEC settles charges with 4 firms it says downplayed SolarWinds hack exposure
The agency alleged Unisys, Avaya, Check Point Software and Mimecast misled investors about the extent of their respective cyber risks.
By David Jones • Oct. 22, 2024