Threats
Highly Sophisticated Malware Attacks Home and Small Office Routers
Security researchers have uncovered an unusually sophisticated malware that has been targeting small office/home office (SOHO) routers for nearly two years, taking advantage of the pandemic and rapi...
CISA Urges Exchange Online Authentication Update
The U.S. Cybersecurity and Infrastructure Security Agency (CISA) is recommending that government agencies and private organizations that use Microsoft's Exchange cloud email platform migrate users an...
Nearly a Million Kubernetes Instances Exposed on Internet
Cybersecurity researchers have found more than 900,000 instances of Kubernetes consoles exposed on the internet.
Cyble researchers detected misconfigured Kubernetes instances that could expose hun...
Cybersecurity Agencies Release Guidance for PowerShell Security
PowerShell is one of the most common tools used by hackers in "living off the land" attacks, when malicious actors use an organization's own tools against itself.
This week, U.S. cybersecurity age...
Microsoft 365 Research Highlights Cloud Vulnerabilities
In a sequence that suggests cloud services may be more vulnerable than many think, Proofpoint researchers have demonstrated how hackers could take over Microsoft 365 accounts to ransom files stored o...
What is a Cyberattack? Types and Defenses
A cyberattack is any action taken by a cyber criminal in an attempt to illegally gain control of a computer, device, network, or system with malicious intent. Cyber criminals may damage, destroy, st...
Millions of MySQL Servers are Publicly Exposed
More than 3.6 million MySQL servers are publicly exposed on the internet, security researchers noted this week.
Shadow Server Foundation researchers reported that they simply issued a MySQL c...
Microsoft Leads in Exploited Vulnerabilities; Office is Latest Target
With nearly $200 billion in annual sales, Microsoft is the world's largest software and information technology (IT) vendor, its products widely used by both companies and consumers. That also makes i...
Encryption: How It Works, Types, and the Quantum Future
Encryption and the development of cryptography have been a cornerstone of IT security for decades and remain critical for data protection against evolving threats.
While cryptology is thousand...
U.S. Agencies Ordered to Fix Critical VMware Vulnerabilities by Monday
The U.S. Cybersecurity and Infrastructure Security Agency (CISA) has ordered federal agencies to fix critical vulnerabilities in VMware products by Monday or remove the products from service.
Mult...
