July 29, 2019

Weekly Security News Roundup: US Company Selling Fully Working BlueKeep Exploit

3 min read - Last week in security news, a U.S. company announced that its penetration tool had incorporated a fully working exploit for the BlueKeep vulnerability.

July 24, 2019

Attack Campaign Targets Exposed Elasticsearch Servers With DDoS Botnet

2 min read - Researchers spotted an attack campaign that is seeking out publicly exposed Elasticsearch databases and servers to deliver a DDoS botnet.

July 22, 2019

MegaCortex Ransomware Uses Aggressive Ransom Notes to Coerce Payments

2 min read - Researchers analyzed a sample of the MegaCortex ransomware family that used an aggressive ransom note to bully victims into meeting their demands.

July 22, 2019

Fake FaceApp Infects Users With MobiDash Malware

2 min read - Amid warnings about the security risks of the "FaceApp Challege," a new threat has emerged: MobiDash malware piggybacking on fake FaceApp installs.

July 22, 2019

Weekly Security News Roundup: Vulnerability Exposed Instagram Attacks to Hijacking

3 min read - Last week in security news, a researcher uncovered a critical vulnerability that allowed attackers to hijack any Instagram account within 10 minutes.

Threat Intelligence July 22, 2019

The Dark Web Market Is Moving Toward IaaS and MaaS — Here’s Why

4 min read - The dark web market is shifting from commodities to cybercrime services such as infrastructure-as-a-service (IaaS) and malware-as-a-service (MaaS), creating benefits and challenges for security teams.

Threat Intelligence July 18, 2019

I Can’t Believe Mirais: Tracking the Infamous IoT Malware

10 min read - Mirai malware is often perceived as a low-risk threat to enterprise security, but consumer devices in the home can expose corporate networks to botnet attacks.

July 17, 2019

SWEED Threat Actor Uses Typosquatting, UAC Bypasses to Distribute Agent Tesla

< 1 min read - Researchers observed a threat actor known as SWEED using typosquatting and UAC bypassing techniques to distribute Agent Tesla and other malware.

July 15, 2019

Weekly Security News Roundup: Zero-Day Vulnerability Exploited in Buhtrap Attack Campaign

3 min read - Last week, security researchers identified a zero-day vulnerability that was instrumental in a targeted attack against companies in Eastern Europe.

Intelligence & Analytics July 11, 2019

Take a Proactive Approach to the Darknet Threat

4 min read - A proactive approach to security and intelligence gathering is the best way to stem the tide of threats and lucrative trading of business-critical data on the darknet.