article thumbnail

5 Linux malware families SMBs should protect themselves against

Malwarebytes

There’s no shortage of reasons why an SMB might use Linux to run their business: There are plenty of distros to choose from, it’s (generally) free, and perhaps above all — it’s secure. But unfortunately, there’s more to Linux security than just leaning back in your chair and sipping piña coladas. How it works.

Malware 128
article thumbnail

Vulnerability Recap 10/01/24 – NVIDIA, Ivanti & Newcomer Kia See Issues

eSecurity Planet

The problem: Drive remapping and cache poisoning could lead to DLL hijacking of Microsoft Windows 10, Windows 11, Windows Server 2016, Windows Server 2019, and Windows Server 2022. Microsoft Doesn’t Consider Privilege Escalation Flaw a Vulnerability Type of vulnerability: DLL hijacking leading to privilege escalation.

Insiders

Sign Up for our Newsletter

This site is protected by reCAPTCHA and the Google Privacy Policy and Terms of Service apply.

article thumbnail

VulnRecap 3/4/24 – Ivanti, Ubiquiti, AppLocker Under Attack

eSecurity Planet

The problem: The FBI warns that during the dismantling of the Moobot botnet, agents detected code from other Russian attackers, including the notorious Fancy Bear (AKA: APT28 or Military Unit 26165) also responsible for the attack on the US Democratic National Committee (DNC) before the 2016 election.

IoT 118
article thumbnail

Vulnerability Recap 4/1/24: Cisco, Fortinet & Windows Server Updates

eSecurity Planet

The fix: Apply the emergency fixes issued by Microsoft for: Windows Server 2022 Windows Server 2019 Windows Server 2016 Windows Server 2012 R2 Attackers Actively Exploit Fortinet Enterprise Management Server SQLi Flaw Type of vulnerability: SQL injection (SQLi) flaw.

article thumbnail

For better security, online retailers must up tighten up defenses and improve threat intel

SC Magazine

Today’s columnist, Yonatan Israel Garzon of Cyberint, says that the online boom during the pandemic has caused serious security issues for online retailers. He says they must tighten up security defenses and improve threat intelligence. This happened to LinkedIn in 2016. Credit: Instatcart.

Retail 57
article thumbnail

Cyber Security in Banking: Threats, Solutions & Best Practices

eSecurity Planet

Real-world example: In 2016, Bangladesh’s central bank fell victim to an APT attack in which hackers accessed the bank’s systems and attempted to steal $1 billion by manipulating its SWIFT payment system.

Banking 109
article thumbnail

Top Breach and Attack Simulation (BAS) Vendors

eSecurity Planet

Founded in 2016, the Rishon LeZion-based vendor specializes in breach and attack simulation and security posture verification. With the SafeBreach platform deployed, organizations can expect increased security control effectiveness, real threat emulation, and improved cloud security. Picus Security.