Dark Reading is part of the Informa Tech Division of Informa PLC

This site is operated by a business or businesses owned by Informa PLC and all copyright resides with them.Informa PLC's registered office is 5 Howick Place, London SW1P 1WG. Registered in England and Wales. Number 8860726.

Threat Intelligence

News & Commentary
BEC Busts Take Down Multimillion-Dollar Operations
Kelly Sheridan, Staff Editor, Dark ReadingNews
The two extraditions of business email compromise attackers indicate a step forward for international law enforcement collaboration.
By Kelly Sheridan Staff Editor, Dark Reading, 7/6/2020
Comment0 comments  |  Read  |  Post a Comment
Credit-Card Skimmer Seeks Websites Running Microsoft's ASP.NET
Dark Reading Staff, Quick Hits
The payment-card skimmer targets websites hosted on Microsoft IIS servers and running the ASP.NET web framework.
By Dark Reading Staff , 7/6/2020
Comment0 comments  |  Read  |  Post a Comment
22,900 MongoDB Databases Affected in Ransomware Attack
Dark Reading Staff, Quick Hits
An attacker scanned for databases misconfigured to expose information and wiped the data, leaving a ransom note behind.
By Dark Reading Staff , 7/2/2020
Comment0 comments  |  Read  |  Post a Comment
Chinese Software Company Aisino Uninstalls GoldenSpy Malware
Steve Zurier, Contributing WriterNews
Follow-up sandbox research confirms Aisino knew about the malware in its tax software, though it's still unclear whether it was culpable.
By Steve Zurier Contributing Writer, 7/1/2020
Comment0 comments  |  Read  |  Post a Comment
DHS Shares Data on Top Cyber Threats to Federal Agencies
Robert Lemos, Contributing WriterNews
Backdoors, cryptominers, and ransomware were the most widely detected threats by the DHS Cybersecurity and Infrastructure Security Agency (CISA)'s intrusion prevention system EINSTEIN.
By Robert Lemos Contributing Writer, 7/1/2020
Comment0 comments  |  Read  |  Post a Comment
Microsoft Issues Out-of-Band Patches for RCE Flaws
Dark Reading Staff, Quick Hits
Vulnerabilities had not been exploited or publicly disclosed before fixes were released, Microsoft reports.
By Dark Reading Staff , 7/1/2020
Comment0 comments  |  Read  |  Post a Comment
Another COVID-19 Side Effect: Rising Nation-State Cyber Activity
Stephen Ward, VP, ThreatConnectCommentary
While financial institutions and government remain popular targets, COVID-19 research organizations are now also in the crosshairs.
By Stephen Ward VP, ThreatConnect, 7/1/2020
Comment1 Comment  |  Read  |  Post a Comment
Ripple20 Threatens Increasingly Connected Medical Devices
Kelly Sheridan, Staff Editor, Dark ReadingNews
A series of IoT vulnerabilities could put hospital networks, medical data, and patient safety at risk.
By Kelly Sheridan Staff Editor, Dark Reading, 6/30/2020
Comment12 comments  |  Read  |  Post a Comment
DDoS Attacks Jump 542% from Q4 2019 to Q1 2020
Dark Reading Staff, Quick Hits
The shift to remote work and heavy reliance on online services has driven an increase in attacks intended to overwhelm ISPs.
By Dark Reading Staff , 6/30/2020
Comment7 comments  |  Read  |  Post a Comment
3 Years After NotPetya, Many Organizations Still in Danger of Similar Attacks
Jai Vijayan, Contributing WriterNews
The same gaps that enabled ransomware to spread remain in patching, network segmentation, backup practices, security experts say.
By Jai Vijayan Contributing Writer, 6/30/2020
Comment0 comments  |  Read  |  Post a Comment
University of California SF Pays Ransom After Medical Servers Hit
Robert Lemos, Contributing WriterNews
As one of at least three universities hit in June, the school paid $1.14 million to cybercriminals following an attack on "several IT systems" in the UCSF School of Medicine.
By Robert Lemos Contributing Writer, 6/29/2020
Comment1 Comment  |  Read  |  Post a Comment
Russian Cybercriminal Behind CardPlanet Sentenced to 9 Years
Kelly Sheridan, Staff Editor, Dark ReadingNews
Aleksei Burkov will go to federal prison for operating two websites built to facilitate payment card fraud, hacking, and other crimes.
By Kelly Sheridan Staff Editor, Dark Reading, 6/29/2020
Comment1 Comment  |  Read  |  Post a Comment
Files Stolen from 945 Websites Discovered on Dark Web
Dark Reading Staff, Quick Hits
Researchers who found the archived SQL files estimate up to 14 million people could be affected.
By Dark Reading Staff , 6/29/2020
Comment0 comments  |  Read  |  Post a Comment
SOC Wins & Losses
Kelly Jackson Higgins, Executive Editor at Dark ReadingNews
While the security operations center is enjoying a higher profile these days, just one-fourth of security operations centers actually resolve incidents quickly enough.
By Kelly Jackson Higgins Executive Editor at Dark Reading, 6/26/2020
Comment0 comments  |  Read  |  Post a Comment
7 Tips for Effective Deception
Jai Vijayan, Contributing Writer
The right decoys can frustrate attackers and help detect threats more quickly.
By Jai Vijayan Contributing Writer, 6/25/2020
Comment0 comments  |  Read  |  Post a Comment
Contact Tracing & Threat Intel: Broken Tools & Processes
Doug Helton, Chief Strategy Officer & VP Intelligence, King & UnionCommentary
How epidemiology can solve the people problem in security.
By Doug Helton Chief Strategy Officer & VP Intelligence, King & Union, 6/25/2020
Comment0 comments  |  Read  |  Post a Comment
Lucifer Malware Aims to Become Broad Platform for Attacks
Robert Lemos, Contributing WriterNews
The recent spread of the distributed denial-of-service tool attempts to exploit a dozen web-framework flaws, uses credential stuffing, and is intended to work against a variety of operating systems.
By Robert Lemos Contributing Writer, 6/25/2020
Comment0 comments  |  Read  |  Post a Comment
'GoldenSpy' Malware Hidden in Tax Software Spies on Companies Doing Business in China
Steve Zurier, Contributing WriterNews
Advanced persistent threat (APT) campaign aims to steal intelligence secrets from foreign companies operating in China.
By Steve Zurier Contributing Writer, 6/25/2020
Comment1 Comment  |  Read  |  Post a Comment
No Internet Access? Amid Protests, Here's How to Tell Whether the Government Is Behind it
Seth Rosenblatt, Contributing WriterNews
Government-mandated Internet shutdowns occur far more regularly than you might expect.
By Seth Rosenblatt Contributing Writer, 6/24/2020
Comment0 comments  |  Read  |  Post a Comment
Black Hat Survey: Breach Concerns Hit Record Levels Due to COVID-19
Tim Wilson, Editor in Chief, Dark Reading, News
Annual "Black Hat USA Attendee Survey" indicates unprecedented concern over possible compromises of enterprise networks and US critical infrastructure.
By Tim Wilson, Editor in Chief, Dark Reading , 6/24/2020
Comment0 comments  |  Read  |  Post a Comment
More Stories
Current Conversations
Posted by Qualitybacklinks
Current Conversations yes, i hope so
In reply to: Re: Affected devices
Post Your Own Reply
Posted by FlynneTrobe
Current Conversations yes, i hope so
In reply to: Re: Affected devices
Post Your Own Reply
More Conversations
COVID-19: Latest Security News & Commentary
Dark Reading Staff 7/6/2020
Ripple20 Threatens Increasingly Connected Medical Devices
Kelly Sheridan, Staff Editor, Dark Reading,  6/30/2020
DDoS Attacks Jump 542% from Q4 2019 to Q1 2020
Dark Reading Staff 6/30/2020
Register for Dark Reading Newsletters
White Papers
Video
Cartoon
Current Issue
How Cybersecurity Incident Response Programs Work (and Why Some Don't)
This Tech Digest takes a look at the vital role cybersecurity incident response (IR) plays in managing cyber-risk within organizations. Download the Tech Digest today to find out how well-planned IR programs can detect intrusions, contain breaches, and help an organization restore normal operations.
Flash Poll
The Threat from the Internetand What Your Organization Can Do About It
The Threat from the Internetand What Your Organization Can Do About It
This report describes some of the latest attacks and threats emanating from the Internet, as well as advice and tips on how your organization can mitigate those threats before they affect your business. Download it today!
Twitter Feed
Dark Reading - Bug Report
Bug Report
Enterprise Vulnerabilities
From DHS/US-CERT's National Vulnerability Database
CVE-2020-5595
PUBLISHED: 2020-07-07
TCP/IP function included in the firmware of Mitsubishi Electric GOT2000 series (CoreOS with version -Y and earlier installed in GT27 Model, GT25 Model, and GT23 Model) contains a buffer overflow vulnerability, which may allow a remote attacker to stop the network functions of the products or execute...
CVE-2020-5596
PUBLISHED: 2020-07-07
TCP/IP function included in the firmware of Mitsubishi Electric GOT2000 series (CoreOS with version -Y and earlier installed in GT27 Model, GT25 Model, and GT23 Model) does not properly manage sessions, which may allow a remote attacker to stop the network functions of the products or execute a mali...
CVE-2020-5597
PUBLISHED: 2020-07-07
TCP/IP function included in the firmware of Mitsubishi Electric GOT2000 series (CoreOS with version -Y and earlier installed in GT27 Model, GT25 Model, and GT23 Model) contains a null pointer dereference vulnerability, which may allow a remote attacker to stop the network functions of the products o...
CVE-2020-5598
PUBLISHED: 2020-07-07
TCP/IP function included in the firmware of Mitsubishi Electric GOT2000 series (CoreOS with version -Y and earlier installed in GT27 Model, GT25 Model, and GT23 Model) contains an improper access control vulnerability, which may which may allow a remote attacker tobypass access restriction and stop ...
CVE-2020-5599
PUBLISHED: 2020-07-07
TCP/IP function included in the firmware of Mitsubishi Electric GOT2000 series (CoreOS with version -Y and earlier installed in GT27 Model, GT25 Model, and GT23 Model) contains an improper neutralization of argument delimiters in a command ('Argument Injection') vulnerability, which may allow a remo...