2003 matches found
Ransom Demands Return: New DDoS Extortion Threats From Old Actors Targeting Finance and Retail
Update 08/24/2020 As mentioned below, the Akamai SIRT has been tracking attacks from the so-called Armada Collective and Fancy Bear actors, who are sending ransom letters to various industry verticals such as finance, travel, and e-commerce. In addition to the...
Medical Debt Collection Firm R1 RCM Hit in Ransomware Attack
R1 RCM Inc. NASDAQ:RCM, one of the nations largest medical debt collection companies, has been hit in a ransomware attack. Formerly known as Accretive Health Inc., Chicago-based R1 RCM brought in revenues of $1.18 billion in 2019. The company has more than 19,000 employees and contracts with at...
Intel PROSet Wireless WiFi Software Advisory - Lenovo Support US
Lenovo Security Advisory: LEN-36230 Potential Impact: Escalation of privilege or denial of service Severity: High Scope of Impact: Industry-wide CVE Identifier: CVE-2020-0559 Summary Description: Intel reported potential security vulnerabilities in Intel PROSet/Wireless WiFi Software that may all...
Intel PROSet Wireless WiFi Software Advisory - Lenovo Support US
No description provided...
ALPS ALPINE Touchpad Driver Vulnerabilities - Lenovo Support US
Lenovo Security Advisory: LEN-31334 Potential Impact: Escalation of privilege Severity: Medium Scope of Impact: Industry-wide CVE Identifier: CVE-2020-15596 Summary Description: ALPS ALPINE reported a DLL search path vulnerability in the ALPS ALPINE Touchpad driver that could allow privilege...
Intel Graphics Driver for Windows - Lenovo Support US
No description provided...
Intel Graphics Driver for Windows - Lenovo Support US
Lenovo Security Advisory: LEN-36229 Potential Impact: Escalation of privilege, Denial of service Severity: High Scope of Impact: Industry-wide CVE Identifier: CVE-2020-0510, CVE-2020-0512, CVE-2020-0513, CVE-2020-8679, CVE-2020-8680, CVE-2020-8681, CVE-2020-8682, CVE-2020-8683 Summary Description...
SQL Injection Vulnerability in Website Building System of Shenyang Digital Industry Information Technology Co.
Shenyang Numerical Information Technology Co., Ltd. is a new technology enterprise specializing in Internet information service, e-commerce application and enterprise application system development. There is a SQL injection vulnerability in the website building system of Shenyang Digital Industry...
Apple Knocked Off Perch as Most Imitated Brand for Phishing Attacks
Google and Amazon overtook Apple in the second quarter Q2 of 2020 as the brand most spoofed by attackers to lure people into falling for phishing attacks. The leaderboard change is likely due to activity related to the COVID-19 pandemic, according to new research. While the number of so-called...
Black Hat 2020: See you in the Cloud!
It hardly feels like summer without the annual trip to Las Vegas for Black Hat USA. With this year’s event being totally cloud based, we won’t have the chance to catch up with security researchers, industry partners, and customers in person, an opportunity we look forward to every year. We’ll sti...
GRUB2 Vulnerability – AKA
No description provided...
Black Hat 2020: See you in the Cloud!
It hardly feels like summer without the annual trip to Las Vegas for Black Hat USA. With this year’s event being totally cloud based, we won’t have the chance to catch up with security researchers, industry partners, and customers in person, an opportunity we look forward to every year. We’ll sti...
Security Bulletin: A security vulnerability has been identified in IBM DB2 shipped with IBM Maximo Asset Management (CVE-2019-4606)
Summary IBM DB2 is shipped as a component of IBM Maximo Asset Management. Information about the security vulnerability affecting IBM DB2 has been published in a security bulletin. Vulnerability Details CVEID: CVE-2019-4606 DESCRIPTION: IBM DB2 High Performance Unload could allow a local attacker ...
The Anatomy of Massive Application Layer DDoS Attacks
During 2020 between June 18 and June 24 Imperva mitigated massive 200K RPS Request Per Second attacks on a daily basis. Here at Imperva we investigate major attacks we mitigated in order to gain a better understanding of their anatomy and allow for smarter mitigation. In this blog post we’ll...
Why Application Security Should Be Considered An Enabler For Business
If you ask Alex, he won't admit being old-fashioned. He has been working in the IT industry for a while now and accepts that security is important for the business's health. But reluctant to take security as the business enabler. In today's environment, moving to digitization is a critical step...
Ask Me Anything – Celebrating The Fifth Anniversary Of My Monthly Threat Webinar
In July 2015, I did my first threat webinar. I had planned to do it on a monthly basis, and never imagined I would still be doing it five years later, but here I am, still creating monthly webinars. I still do. I started the webinar series to help people understand the different threats targeting...
Friday Squid Blogging: China Closing Its Squid Spawning Grounds
China is prohibiting squid fishing in two areas -- both in international waters -- for two seasons, to give squid time to recover and reproduce. This is the first time China has voluntarily imposed a closed season on the high seas. Some experts regard it as an important step forward in China's...
Threat Source newsletter for June 25, 2020
Newsletter compiled by Jon Munshaw. Good afternoon, Talos readers. We recently decided to replace our use of the terms "blacklist" and "whitelist" with "block list" and "allow list.” Even though these terms are commonly in use in the security industry, we will not go along with casually assigning...
Friday Squid Blogging: Fishing for Jumbo Squid
Interesting article on the rise of the jumbo squid industry as a result of climate change. As usual, you can also use this squid post to talk about the security stories in the news that I haven't covered. Read my blog posting guidelines here...
Security Bulletin: IBM Maximo Asset Management is vulnerable to cross-site scripting (CVE-2020-4223)
Summary IBM Maximo Asset Management is vulnerable to cross-site scripting. Vulnerability Details CVEID: CVE-2020-4223 DESCRIPTION: IBM Maximo Asset Management is vulnerable to cross-site scripting. This vulnerability allows users to embed arbitrary JavaScript code in the Web UI thus altering the...