Security News

2019 Midyear Security Roundup: Evasive Threats, Pervasive Effects

Our midyear security roundup highlights threats that made their mark in the first half of 2019, and provides security insights to help users and organizations determine the right solutions and defense strategies against them.

News & Updates

Brand-new and Bizarre: AnteFrigus, PureLocker Ransomware Variants Emerge
November 15, 2019
The AnteFrigus ransomware is delivered via a malvertising campaign to lure victims to the RIG exploit kit server, while the PureLocker ransomware, has been observed to launch targeted attacks against enterprise production servers.
Read more
From SIM Jacking to Bad Decisions: 5G Threats and Security Recommendations in Non-Public Network
November 15, 2019
Our latest research explored threats to 5G connectivity — from SIM jacking, identity fraud, fake news, and poisoning machine learning rules to manipulating business decisions — and they can be addressed through an identity-based approach to security.
Read more
DDoS Attacks That Employ TCP Amplification Cause Network Congestion, Secondary Outages
November 14, 2019
Over the past month, threat actors have been using a relatively non-conventional approach to mount a flurry of distributed denial-of-service (DDoS) attacks: through TCP amplification.
Read more
YouTube Videos Promise Private Key Generator for Bitcoin Addresses, Lead Users to Info-stealing Trojan Instead
November 13, 2019
YouTube videos were being used in a scam to deliver an information-stealing Trojan called Predator the Thief.
Read more
BlueKeep Exploit Will Get an Update Following Recent Attacks
November 12, 2019
There are plans to update the BlueKeep Metasploit exploit after recent investigations revealed that the exploit triggers the blue screen of death in devices. This comes after recent reports of BlueKeep being used to install cryptocurrency miners on vulnerable
Read more
ASP.NET Service Provider SmartASP.net Targeted by Ransomware Attack
November 11, 2019
Another company has disclosed that that they were hit by a ransomware attack, this time involving the encryption of the customer data of SmarterASP.net, a popular hosting service provider for ASP.NET.
Read more
Faster and More Accurate Malware Detection Through Predictive Machine Learning: Correlating Static and Behavioral Features
November 08, 2019
We have developed a machine learning model called TrendX Hybrid Model that uses two training phases — pre-training and training — and allows us to correlate static and behavior features to improve detection rates and reduce false positives.
Read more
CVE-2019-2114: Patched Android Bug That Allows Possible Installation of Malicious Apps
November 07, 2019
An Android bug allows threat actors to transfer a malicious application to a nearby Near Field Communication (NFC)-enabled device via the Android Beam.
Read more
Unpatched Remote Code Execution rConfig Flaws Could Affect Millions of Servers and Network Devices
November 06, 2019
Details on the proof-of-concept (PoC) exploit for two unpatched, critical remote code execution (RCE) vulnerabilities in the network configuration management utility rConfig have been recently disclosed.
Read more

Security News

2019 Midyear Security Roundup: Evasive Threats, Pervasive Effects

Our midyear security roundup highlights threats that made their mark in the first half of 2019, and provides security insights to help users and organizations determine the right solutions and defense strategies against them.

Featured Stories