Credential stuffing is a type of cyberattack where stolen account credentials typically consisting of lists of usernames and/or email addresses and the corresponding passwords (often from a data breach) are used to gain unauthorized access to user accounts through large-scale automated login[...]
In the first quarter of 2020, distributed denial-of-service (DDoS) attacks jumped more than 542% compared with the last quarter of 2019 and more than 278% year-over-year. NexusGuard researchers suggest the spike may be linked to a parallel increase in malicious cyber activity during the COVID-19[...]
Nearly 23,000 MongoDB databases are affected in a ransomware campaign designed to wipe information from misconfigured databases lacking password protection, ZDNet reports.The attacker reportedly used an automated script to scan for exposed databases. When it found one, the script deleted the[...]
The authors of the "Trends in Cybersecurity Breach Disclosures" report from Audit Analytics reviewed 639 cybersecurity breaches at public companies since 2011 and discovered that, on average, each cyber breach costs $116 million.The report found that in 2019, cybercriminals usually targeted[...]
New vulnerabilities in open source packages were down 20% compared to last year suggesting security of open source packages and containers are heading in a positive direction, according to Snyk.Well known vulnerabilities, such as cross-site scripting, continue to be reported but aren’t impacting as[...]
Attackers leveled a massive distributed denial-of-service attack against a specific website in early June, topping a bandwidth of 1.44 terabits-per-second and 385 million packets-per-second, the largest volumetric attack encountered by Internet infrastructure firm Akamai.Akamai said a second attack[...]
There has been a shift in internet traffic patterns coinciding with an increase in DDoS and other types of network attacks in recent months as organizations across industries quickly transitioned to remote workforces and individuals under stay-at-home orders began relying on the internet more[...]
The complexity and size of DDoS attacks in 2019 has increased significantly compared to 2018. A report published by NaWas by NBIP concludes that despite the number of attacks has decreased slightly over 2019, their complexity and size has increased significantly.Slightly fewer DDoS attacks were[...]
Magecart attackers have compromised web shops belonging to large retail chains Claire’s and Intersport and equipped them with payment card skimmers.The compromise of Claire’s online store and that of its sister brand Icing has been flagged by Sansec researchers.The skimmer was served from a domain[...]
Cybersecurity researchers uncovered a new critical vulnerability affecting the Server Message Block (SMB) protocol that could allow attackers to leak kernel memory remotely, and when combined with a previously disclosed "wormable" bug, the flaw can be exploited to achieve remote code execution[...]
