Endpoint Security

Reports Finds IoT Devices Host Social Media Apps, FDA-Recalled Platforms

by Jessica Davis

An analysis of over 5 million IoT, IoMT, and unmanaged devices found a host of security risks, including those in the healthcare sector, from Facebook and...

Emotet Malware Threat Actors Return with Massive Email Campaign

by Jessica Davis

The notorious Emotet malware threat actors have resurfaced after a 5-month hiatus with a massive campaign that has send well over 250,000 emails containing highly obfuscated,...

Top Risks of 1H 2020: Ransomware, Mobile, Health Infrastructure

by Jessica Davis

The first half of 2020 has seen a spate of cyberattacks fueled by the COVID-19 pandemic with a spike in ransomware samples and mobile vulnerabilities, as well as a host of...

DOJ Accuses China of Targeted Hacking on COVID-19 Research Data

by Jessica Davis

The Department of Justice has indicted two hackers for allegedly working with the government of China to target and hack hundreds of US companies, governments, organizations, and others...

Lorien Health Services Ransomware Attack Impacts 48K Patients

by Jessica Davis

Maryland Health Services, DBA Lorien Health Services, recently reported that a June ransomware attack on its systems potentially breached the data of 47,754 patients. Lorien...

Feds Issue Emergency Directive to Patch Critical DNS Server Flaw

by Jessica Davis

An emergency directive from the Department of Homeland Security Cybersecurity and Infrastructure Security Agency gave federal agencies just 24-hours to apply a patch to a...

DHS Shares Insights on Network Tunneling, Obfuscating Cyberattacks

by Jessica Davis

Recent insights from the Department of Homeland Security Cybersecurity and Infrastructure Security Agency shed light on recent cyberattacks that leverage network tunneling and spoofing...

Report Finds Serious Flaws in COVID-19 Vaccine Developers’ Systems

by Jessica Davis

An examination by BitSight into 17 biomedical, healthcare, pharmaceutical, and other academic research facilities publicly known to be working on the development of a COVID-19...

Russian Hackers Target COVID-19 Vaccine Developers with Cyberattacks

by Jessica Davis

Russian hackers are targeting the healthcare, pharmaceutical, and academic research sectors, as well as other vaccine developers with cyberattacks, in an effort designed to steal information...

The Key to Improving Medical Device Security is Collaboration, Visibility

by Jessica Davis

The recently reported Ripple20 vulnerabilities found in more than 52,000 medical device models that could allow for remote code execution, highlight the need for greater...

Microsoft Patches Critical, Wormable Flaw in Windows DNS Servers

by Jessica Davis

The Department of Homeland Security Cybersecurity and Infrastructure Security issued an alert, urging organization administrators to apply a Microsoft-issued patch for a...

Report: Over 1 in 10 Ransomware Attacks Results in Data Theft

by Jessica Davis

More than one out of 10 ransomware attacks results in data theft, increasing the risk of data loss, business interruption, regulatory penalties, legal harm, and reputational damage, according to...

41 Providers Reported Ransomware Attacks in First Half of 2020

by Jessica Davis

At least 41 hospitals and healthcare providers organizations reported being impacted by successful ransomware attacks during the first half of 2020, according to recent Emsisoft research....

15 Billion Compromised Credentials Available for Sale on Hacker Forums

by Jessica Davis

There are currently 15 billion compromised credentials and passwords for sale on hacker forums, stolen from more than 100,000 separate data breaches in the last two years, according to a new...

Microsoft Sues, Now Controls COVID-19 Phishing Campaign Domains

by Jessica Davis

The US District Court for the Eastern District of Virginia recently unsealed court documents that reveal Microsoft's to put an end to a massive COVID-19-themed phishing campaign...

NSA Shares Guide to Securing IPSec VPNs, Telework, Remote Sites

by Jessica Davis

The National Security Agency (NSA) released guidance designed to help organizations better secure Ip Security (IpSec) Virtual Private Networks (VPNs), given the rapid adoption of telework and...

Impact of Ripple20 Vulnerabilities on Healthcare IoT, Connected Devices

by Jessica Davis

Healthcare is the sector most impacted by a group of 19 critical vulnerabilities known as Ripple20, found in the TCP/IP communication stack of hundreds of millions of IoT and connected...

FBI, CISA Share Mitigation Guidance for Obfuscated Cyberattacks Via Tor

by Jessica Davis

The FBI and the Department of Homeland Security Cybersecurity and Infrastructure Security Agency released a joint alert warning organizations of the threat of cyberattacks originating...

DHS CISA Alerts to OpenClinic GA Hospital Management System Flaws

by Jessica Davis

The Department of Homeland Security Cybersecurity and Infrastructure Security Agency issued an ICS-CERT medical advisory for 12 critical and serious vulnerabilities found in...

DHS CISA Urges Patch of Critical Palo Alto Pan-OS Vulnerability

by Jessica Davis

Palo Alto Networks released an advisory regarding a critical vulnerability found in its PAN-OS, which could allow a hacker to gain access to protected resources. In response, the...