Cyberattacks
-
TU IS via Getty Images
Attackers exploiting Cisco vulnerabilities tied to Salt Typhoon campaign
GreyNoise observed exploitation of CVE-2018-0171, which Cisco Talos researchers said was used in a recent attack by the China-backed threat group.
By Rob Wright • Feb. 25, 2025 -
stock.adobe.com/Song_about_summer
Sponsored by Palo Alto NetworksIs your browser ground zero for cyber-attacks?
Organizations must not overlook web browser threats – or the new technologies that can defeat them.
By Anupam Upadhyaya, Vice President Product Management – Prisma SASE at Palo Alto Networks • Feb. 24, 2025 -
GOCMEN via Getty Images
Tech investment firm Insight Partners discloses data breach
The company holds equity in several major technology companies, including Wiz and Kaseya.
By Rob Wright • Feb. 19, 2025 -
TU IS via Getty Images
Lee Enterprises says cyberattack will likely have material impact
The newspaper chain said attackers encrypted critical applications and impacted billing, payments and print distribution.
By David Jones • Feb. 18, 2025 -
Philip Steury via Getty Images
Phishing campaign targets Microsoft device-code authentication flows
Russian state-sponsored hackers have attacked enterprises and government agencies in North America and overseas.
By Rob Wright • Feb. 18, 2025 -
NicoElNino via Getty Images
China-backed hackers continue cyberattacks on telecom companies
Salt Typhoon threat actors compromised Cisco edge devices by exploiting older vulnerabilities.
By Rob Wright • Feb. 13, 2025 -
iStock / Getty Images Plus via Getty Images
Ransomware gangs shifting tactics to evade enterprise defenses
Threat actors adapted to improved threat detection, law enforcement actions, new Huntress research finds.
By Rob Wright • Feb. 12, 2025 -
iStock / Getty Images Plus via Getty Images
Lee Enterprises investigating cyberattack that disrupted operations across multiple news outlets
The company, a major U.S. newspaper chain, has been working with forensic specialists to fully restore services and determine the cause.
By David Jones • Feb. 11, 2025 -
Getty Images via Getty Images
VeraCore zero-day vulnerabilities exploited in supply chain attacks
Cybercriminals maintained access to one victim organization for more than four years.
By Rob Wright • Feb. 11, 2025 -
Courtesy of Trimble
CISA warns of hackers targeting vulnerability in Trimble Cityworks to conduct RCE
The software is widely used in projects by local governments, utilities, airports and other facilities.
By David Jones • Feb. 10, 2025 -
JHVEPhoto via Getty Images
HPE issues breach notifications for 2023 Midnight Blizzard attack
Russian state-sponsored hackers compromised the tech giant's Office 365 email environment.
By Rob Wright • Feb. 10, 2025 -
gorodenkoff/iStock via Getty Images
Suspected botnet targets edge devices using brute force attacks
Researchers warn of a surge in attempted logins targeting devices from SonicWall, Palo Alto Networks and others.
By David Jones • Feb. 7, 2025 -
Motortion via Getty Images
Hackers deployed web shells, exploited public-facing applications in Q4
A Cisco Talos report also indicated a sharp increase in remote access tools being leveraged in ransomware.
By David Jones • Feb. 6, 2025 -
Anthony Kwan/Getty Images via Getty Images
DeepSeek surge hits companies, posing security risks
The Trump administration is scrutinizing the AI app, Italy and Taiwan have banned it, and companies have blocked it.
By Alexei Alexis • Feb. 5, 2025 -
Just_Super via Getty Images
Ransomware payments fell 35% in 2024
Cyberattacks using ransomware spiked in the second half of the year, but fewer victims paid up.
By Rob Wright • Feb. 5, 2025 -
Courtesy of Rhode Island
Deloitte pays $5M in connection with breach of Rhode Island benefits site
The company agreed to cover expenses related to recovery from the December cyberattack.
By David Jones • Feb. 5, 2025 -
Just_Super via Getty Images
State-linked hackers deploy macOS malware in fake job interview campaign
Actors linked to North Korea bypassed Apple security using malware called FlexibleFerret.
By Robert Wright, Contributing Reporter • Feb. 4, 2025 -
gorodenkoff via Getty Images
SonicWall SMA 1000 series appliances left exposed on the internet
The company last week confirmed attackers are actively exploiting a critical vulnerability in the devices.
By David Jones • Jan. 28, 2025 -
Stock photos via Getty Images
Deep DiveNetwork security tool defects are endemic, eroding enterprise defense
When malicious hackers exploit vulnerabilities in firewalls, VPNs and routers, it’s not the vendors that get hit — it’s their customers.
By Matt Kapko • Jan. 28, 2025 -
Scott Olson/Getty Images via Getty Images
Procter & Gamble operations unhindered by Blue Yonder disruption
The consumer goods company built an in-house solution to keep orders moving as its transportation management system provider navigated a ransomware attack.
By Kelly Stroh • Jan. 28, 2025 -
Courtesy of UnitedHealth Group
UnitedHealth hikes number of Change cyberattack breach victims to 190M
The new estimate nearly doubles the company’s previous report of 100 million affected individuals, already the largest healthcare data breach ever reported to federal regulators.
By Emily Olsen • Jan. 27, 2025 -
Chip Somodevilla via Getty Images
BeyondTrust says 17 customers impacted by December cyberattack spree
State-linked hackers were linked to a series of attacks that led to the theft of unclassified data from the Treasury Department.
By David Jones • Jan. 24, 2025 -
iStock / Getty Images Plus via Getty Images
Attackers lodge backdoors into Ivanti Connect Secure devices
Shadowserver scans found 379 compromised Ivanti Connect Secure devices. Researchers said the situation is serious and likely impacts more organizations.
By Matt Kapko • Jan. 24, 2025 -
Wirestock via Getty Images
Ivanti zero-days chained together in at least 3 attacks, authorities warn
The vendor’s customers have confronted multiple attack sprees targeting zero-days spanning a variety of products.
By Matt Kapko • Jan. 23, 2025 -
CharlieTong via Getty Images
Government payments contractor Conduent confirms cyberattack impacts multiple states
The incident led to delays in processing child support payments in Wisconsin.
By David Jones • Jan. 23, 2025
