Endpoint Security

Enterprise Mobile Phishing Attacks Spike Amid COVID-19 Crisis

by Jessica Davis

The number of phishing attacks targeting enterprise mobile devices sharply increased during the first quarter of 2020, driven by the rise in remote workers amid the COVID-19 crisis, according to a...

Hackers Update Notorious TrickBot Malware to Evade Detection

by Jessica Davis

The notorious Trickbot malware variant, frequently used prior to the deployment of ransomware and other malware, has been updated to evade detection, according to new research from Palo Alto Networks...

Hackers Access PHI During Mat-Su Surgical Ransomware Attack

by Jessica Davis

Arkansas-based Mat-Su Surgical Associates (MTA) is notifying 13,136 current patients and some current or former patients of Valley Surgical Associates that their protected health information was viewed...

Remote Attacks on Cloud Service Targets Rose 630% Amid COVID-19

by Jessica Davis

A recent McAfee report confirms that cybercriminals have been steadily working to exploit the increase in remote work during the COVID-19 pandemic, with researchers finding that remote attacks on cloud...

NSA Warns Russian Hacking Group Targeting Vulnerable Email Systems

by Jessica Davis

The hacking group known as Sandworm, based in Russia, have been actively exploiting a vulnerability found in the Exim Mail Transfer Agent (MTA) email software, according to an alert from the National...

New COVID-19 Spear-Phishing, Spoofing Attacks Mimic Google, WHO

by Jessica Davis

Cybercriminals are once again working to take advantage of the COVID-19 pandemic through two new phishing campaigns: Hack-for-hire groups are spoofing the World Health Organization (WHO), while other...

Health Departments, State Govts. At Risk of COVID-19 Spoofing, Fraud

by Jessica Davis

Forty-four percent of state health departments and state governments do not have a published Domain-based Message Authentication, Reporting & Conformance (DMARC), making these entities much more...

External Threats Outpace Insider-Related Breaches in Healthcare

by Jessica Davis

The number of confirmed data breaches in the healthcare sector substantially increased last year, as external threats exceeded the number of insider-related incidents for one of the first times,...

H-ISAC Shares Identity Management Framework for Healthcare CISOs

by Jessica Davis

The Health Information Sharing and Analysis Center recently released an identity management framework for the healthcare sector, designed to help chief information security officers better manage...

Sens. Ask FBI, CISA How to Protect COVID-19 Medical Research Data

by Jessica Davis

The FBI and the Department of Homeland Security Cybersecurity and Infrastructure Agency are being asked how they’re defending against attempts to hack COVID-19-related research data, following...

NetWalker Ransomware Expands Operations, Targeting Healthcare

by Jessica Davis

The NetWalker ransomware threat actors – a serious threat to the healthcare sector – has ramped up its business model, transitioning into a Ransomware-as-a-Service (Raas) model in an...

Paying the Ransom Can Double Ransomware Attack Recovery Costs

by Jessica Davis

The FBI, Microsoft, and others have repeatedly warned victims to not pay the ransom demands after a cyberattack for a host a reasons. And new research from Sophos confirms that ransomware payments can...

DHS CISA, FBI Reveal The Top Exploited Vulnerabilities Since 2016

by Jessica Davis

The Department of Homeland Security Cybersecurity and Infrastructure Security Agency, the FBI, and the US government recently unveiled the 10 most exploited vulnerabilities from 2016 and 2019, as well...

DHS CISA, FBI Warn Chinese Hackers Targeting COVID-19 Research Firms

by Jessica Davis

Research facilities working on the response to the COVID-19 pandemic are being targeted by hackers tied to the People’s Republic of China, according to a joint alert from the FBI and the...

Feds Alert to New North Korean Malware Threats, Mitigation Tactics

by Jessica Davis

The Department of Homeland Security Cybersecurity and Infrastructure Security Agency, the FBI, and the Department of Homeland Security issued an alert regarding three newly identified malware variants...

Ransomware Success Declines Amid COVID-19, But Resurgence is Likely

by Jessica Davis

Successful ransomware attacks on the US healthcare sector are in decline with just 25 providers impacted during the first quarter of 2020, compared to a total of 764 events, or an average of 191 per...

APT Hackers Targeting Healthcare, Essential Services Amid COVID-19

by Jessica Davis

Healthcare organizations and other essential services are again being warned that advanced persistent threat (APT) hacking groups are continuing to exploit the COVID-19 pandemic; this time to actively...

Ransomware Causes 15 Days of EHR Downtime, as Payments Avg $111K

by Jessica Davis

The average ransomware demand paid by organizations jumped 33 percent to nearly $112,000 between the last quarter of 2019 and the first quarter of 2020, according to Coveware’s Q1 ransomware...

COVID-19 Remote Work Causes Spike in Brute-Force RDP Cyberattacks

by Jessica Davis

The number of brute-force attacks on remote desktop protocol (RDP) servers has drastically increased amid the COVID-19 pandemic, as a record number of employees are now working from home, according to...

EFF Warns COVID-19 Tracing Apps Pose Cybersecurity, Privacy Risks

by Jessica Davis

The Electronic Frontier Foundation are joining the call urging COVID-19 contact tracing app developers to consider the potential privacy and security risks posed by these technologies, while warning no...