6 Questions Attackers Ask Before Choosing an Asset to Exploit
David “moose” Wolpoff at Randori explains how hackers pick their targets, and how understanding “hacker logic” can help prioritize defenses.
Read More
exploits
Think-Tanks Under Attack by Foreign APTs, CISA Warns
The feds have seen ongoing cyberattacks on think-tanks (bent on espionage, malware delivery and more), using phishing and VPN exploits as primary attack vectors.
Read MoreGolang Worm Widens Scope to Windows, Adds Payload Capacity
A first-stage malware loader spotted in active campaigns has added additional exploits and a new backdoor capability.
Read MoreInside the Hoaxcalls Botnet: Both Success and Failure
The DDoS group sets itself apart by using exploits — but it doesn’t always pan out.
Read MoreA Brisk Private Trade in Zero-Days Widens Their Use
More zero-day exploits coming up for sale by NSO Group and others is democratizing the attack vector and placing them within reach of less sophisticated attackers.
Read MoreChinese Hackers Exploit Cisco, Citrix Flaws in Massive Espionage Campaign
Researchers say that APT41’s exploits are part of one of the broadest espionage campaigns they’ve seen from a Chinese-linked actor “in recent years.”
Read MoreCritical Citrix RCE Flaw Still Threatens 1,000s of Corporate LANs
RCE and myriad other types of attacks could take aim at the 19 percent of vulnerable companies that haven’t yet patched CVE-2019-19781.
Read MoreMean Time to Hardening: The Next-Gen Security Metric
Given that the average time to weaponizing a new bug is seven days, you effectively have 72 hours to harden your systems before you will see new exploits.
Read MoreEchobot IoT Botnet Casts a Wide Net with Raft of Exploit Additions
13 new exploits have been added to the malware’s bag of tricks.
Read More