In a time of non-stop news stories about ransomware, a new variant called FAIRWARE is attacking Linux-based servers running web sites. First reported in a post on Bleeping Computer’s forum, victims believe that their machines have been brute-forced to gain access. Once on the server, the attackers purportedly encrypt and remove the contents of the…
Read More
The University of Pittsburgh is one of the oldest institutions in the U.S., and its Financial Information Systems (FIS) team is committed to delivering the highest level of technical support, instruction and service to enhance individual and organizational performance. The FIS provides value through the strategic use of people, processes and technology, hosting 150 servers…
Read More
Trend Micro published our mid-year security roundup report where we covered the biggest threat stories and trends we observed in the first half of 2016. Not surprising if you’ve been following the threat landscape that ransomware was by far the biggest story, with many organizations around the world in the news affected by this threat….
Read More
The bug bounty business has changed in the past 10 years. I recall from our early days of the Zero Day Initiative (ZDI), we were seen as “controversial” – a publicity stunt to generate some noise in the press. But ultimately, we knew we were on to something. In a recent eWeek article that quoted…
Read More
Welcome to our weekly roundup, where we share what you need to know about the cybersecurity news and events that happened over the past few days. Below you’ll find a quick recap of topics followed by links to news articles and/or our blog posts providing additional insight. Be sure to check back each Friday for…
Read More
Three and a half years ago, The New York Times announced that their network had been breached in a targeted attack. Today, CNN is reporting another breach of The New York Times, among other press outlets. CNN’s report says that investigators are attributing these attacks to Russian sources, possibly in conjunction with the recent attacks…
Read More
In his predictions for 2016, our Chief Technology Officer (CTO), Raimund Genes, said that 2016 would be the year for online extortion. Today, with the release of our security roundup for the first half of 2016, we can say that Raimund’s prediction has been on the mark. In the first half of 2016, the ransomware…
Read More This past weekend, a hacking group calling itself The Shadow Brokers hacked the Equation Group, another hacking group with alleged ties to the United States National Security Agency (NSA). Using Twitter as their communication platform, The Shadow Brokers posted a link to a pastebin, which in turn led to more than 300 MB of exploits…
Read More Welcome to our weekly roundup, where we share what you need to know about the cybersecurity news and events that happened over the past few days. Below you’ll find a quick recap of topics followed by links to news articles and/or our blog posts providing additional insight. Be sure to check back each Friday for…
Read More
Command-and-control (C&C) infrastructure plays an essential role of coordinating botnets and malware. Attackers set up C&C servers to distribute commands or harvest sensitive data from victims’ computers. Simple C&C setups based on hardcoded IPs provide an opportunity for defense. Defenders can blacklist the C&C server IP address or domains. Law enforcement agencies may take down…
Read More
