News
  • "University Project Tracks Ransomware Attacks on Critical Infrastructure"

    A team of researchers at Temple University in Philadelphia has been tracking ransomware attacks on critical infrastructure. The collection of data on these attacks can be requested by anyone, including educators, grad students, government representatives…

  • "Virginia's Largest School System Hit With Ransomware"

    Fairfax County Public Schools (FCPS), Virginia's largest school system, recently faced a ransomware attack on its technology systems. The Maze hacking group claimed to have been behind the attack. This ransomware attack disrupted distance learning for…

  • "Telehealth is Healthcare Industry’s Biggest Cybersecurity Risk"

    Due to the coronavirus, the number of telehealth primary care visits has increased exponentially.  In a new study, researchers reviewed the 148 most-used telehealth vendors.  The researchers found that telehealth providers have experienced a…

  • "Razer Gaming Fans Caught Up in Data Leak"

    A security consultant discovered a misconfigured Elasticsearch cloud cluster that exposed a segment of Razer's infrastructure to the public internet, where anyone could access the information.  Razer is a company that sells gaming gear.  It is…

  • "Ransomware Accounted for 41% of All Cyber Insurance Claims in H1 2020"

    A report recently published by Coalition, one of the leading providers of cyber insurance and security, revealed that ransomware incidents made up 41% of cyber insurance claims filed in the first half of 2020. The high number of claims confirms…

  • "Bluetooth Bug Opens Devices to Man-in-the-Middle Attacks"

    Researchers at Purdue University have discovered a flaw they are calling "BLURtooth." The high-severity Bluetooth vulnerability exists in the pairing process for Bluetooth 4.0 through 5.0 implementations. The vulnerability could allow an unauthenticated…

  • "Hackers Use Cloud Monitoring Tool to Install Cryptominers"

    Reports from Microsoft and Intezer reveal the weaponization of a legitimate cloud monitoring tool, called Weave Scope, to install cryptominers in cloud environments. TeamTNT is the hacking group discovered to be using the tool to perform this malicious…

  • "Third-Party Components Putting Operational Hardware and Software Technologies at Risk"

    Six critical vulnerabilities have been discovered by Claroty researchers in a third-party software component used by top Industrial Control System (ICS) software vendors such as Rockwell Automation and Siemens. These vulnerabilities were found in Wibu-…

  • "COVID-19 Sites Plagued with Third-Party Tracking, Posing Privacy Risk"

    According to a new study published in JAMA, almost all websites designed to provide information to people regarding COVID-19 symptoms, testing, and prevention contain code that transfers data to third parties, posing a threat to users' privacy.…

  • "Digital Point's Unsecured Database Exposed Records of Over 800,000 Users"

    An Elasticsearch database belonging to Digital Point, the world's largest webmaster forum and marketplace for web services, was discovered to be left online without password protection. The unprotected database contained more than 62 million records…

  • "Spyware Labeled ‘TikTok Pro’ Exploits Fears of US Ban"

    Researchers have discovered a malicious app called TikTok Pro. Threat actors are urging users via SMS and Whatsapp messages to download the latest version of Tiktok from a specific web address.  The fake TikTok  Pro app contains malware that…

  • "More IT Security in Port Terminals"

    Ports are critical infrastructures and require improved security, as attacks resulting in disruptions could significantly impact the economy. Digitalized container terminal operations, in particular, face various potential security risks. The movement of…