News
  • "Thousands of Unprotected Elasticsearch Databases Are Being Ransomed"

    Researchers with Secureworks reported a new cybercrime campaign in which many unsecured Internet-facing Elasticsearch instances are being used to steal databases and display a ransom note requesting a ransom to be paid to get the database back. The…

  • "CISA Issues Vulnerability Advisory For Select Dominion Voting Equipment, Urges Updates"

    The Cybersecurity and Infrastructure Security Agency (CISA) recently put out an advisory stating that vulnerabilities within some Dominion voting machines used in roughly a dozen states should be mitigated “as soon as possible.”  The technical flaws…

  • "Ransomware's ROI Retreat Will Drive More BEC Attacks"

    Law enforcement crackdowns, tougher cryptocurrency laws, and the shutdown of Ransomware-as-a-Service (RaaS) operators are lowering the return on investment (ROI) for ransomware operations worldwide. Crane Hassold, a threat researcher at Abnormal Security…

  • "LockBit 2.0 Gang Claims Mandiant as Latest Victim; Mandiant Sees no Evidence of it"

    Recently, a prominent ransomware group claimed it had successfully attacked cybersecurity giant Mandiant and would release company files.  The ransomware group posted a note slamming Mandiant’s recent research linking it to a separate, sanctioned…

  • "Secure Communication With Light Particles"

    Although quantum computers offer a number of novel possibilities, they pose a threat to Internet security because they are expected to render current encryption methods obsolete. Therefore, researchers at TU Darmstadt have created a new tap-proof…

  • "Peekaboo! Here's a System to Guarantee Smart Home Privacy"

    A team of researchers at Carnegie Mellon University's CyLab developed a new privacy-sensitive architecture for developers building smart home apps. The architecture, which the team refers to as "Peekaboo," takes requests from developers to share certain…

  • "Smishing and Vishing Attempts Surged in 2021"

    Security researchers at Proofpoint found that SMS phishing (smishing) attacks more than doubled year-on-year in 2021 as cybercriminals looked to exploit human error to compromise devices.  The researchers conducted a study analyzing over 2.6 billion…

  • "Cyberattack Surface 'Spiralling Out of Control'"

    In a new study, security researchers at Trend Micro polled over 6200 IT and business decision makers.  They found that global organizations are still beset with cyber visibility and control challenges, with two-fifths (43%) admitting their digital…

  • "Zhang Lab Takes on Cyber-Physical System Hackers"

    Ning Zhang, assistant computer science and engineering professor at the McKelvey School of Engineering at Washington University in St. Louis, wants to develop a new security capability to ensure safety against cyberattacks on pacemakers, autonomous…

  • "Perfect Privacy Technology and Chasing Rainbows"

    Data-driven innovation, whether in the form of tailored medicine, public services, or efficient industrial production, promises to significantly benefit people and the environment, and provide widespread access to data. However, aggressive data…

  • "Critical Vulnerability Found in Motorola's Unisoc Chips"

    Security researchers at Checkpoint Research have recently spotted a critical vulnerability in the Unisoc Tiger T700 chips that power the Motorola Moto G20, E30, and E40 smartphones.  The researchers noted that due to the flaw, the smartphones were…

  • "Millions of MySQL Servers are Publicly Exposed"

    Security researchers at Shadow Server Foundation have discovered that more than 3.6 million MySQL servers are publicly exposed on the internet.  During their research, the researchers simply issued a MySQL connection request on default port 3306 to…