Lucian Constantin
CSO Senior Writer
Lucian Constantin writes about information security, privacy, and data protection for CSO.
Critical flaw in Atlassian Confluence actively exploited
The remote code execution vulnerability was recently patched for affected versions of Atlassian Confluence Server and Data Center; users are advised to apply the patch or upgrade.
Cosmos DB users advised to regenerate their keys following serious vulnerability
The Azure vulnerability, which affects only those using the Jupyter Notebook feature, gives attackers access to data in databases.
How ransomware runs the underground economy
Ransomware gangs are adopting all the core elements of legitimate businesses—including defined staff roles, marketing plans, partner ecosystems, and even venture capital investments—and some hallmarks of more traditional criminal...
LockFile ransomware uses intermittent encryption to evade detection
This newly discovered ransomware works fast, has multiple ways to avoid detection, and preys on Windows systems with known vulnerabilities.
OnePercent ransomware group hits companies via IceID banking Trojan
This new, aggressive ransomware group also uses Cobalt Strike to move laterally across the network.
How attackers could exploit breached T-Mobile user data
Follow-on attacks using stolen T-Mobile data are a real risk for victims. Here's how attackers can leverage that data to compromise accounts or launch phishing campaigns.
IoT devices have serious security deficiencies due to bad random number generation
It's not the IoT vendors' fault. Lack of a cryptographically secure pseudo-random number generator subsystem for the internet of things devices will be vulnerable.
Wave of native IIS malware hits Windows servers
IIS malware presents diverse, persistent, and growing threats from old and new threat actors.
Serious flaws in widespread embedded TCP/IP stack endanger industrial control devices
Critical vulnerabilities potentially affect millions of devices, but finding and patching them will be difficult.
Basic flaws put pneumatic tube transport systems in hospitals at risk
Multiple vulnerabilities could allow persistent take-over and ransom demands by attackers.
APT group hits IIS web servers with deserialization flaws and memory-resident malware
Praying Mantis group is likely a nation-state actor that uses custom malware and is adept at avoiding detection.
-
White Paper
-
Video/Webcast
Sponsored -
White Paper
-
White Paper
-
Resources/Tool
Sponsored
