Cybercrime & Digital Threats

Researchers have discovered a vulnerability in the mail transfer agent (MTA) Exim. If exploited, attackers could execute arbitrary code on vulnerable servers remotely. Exim has already released a patch for this and urges everyone to update immediately.

A lot of best practices teach users how to prevent or defend against phishing attacks, but how can organizations actively detect and thwart them before users even see them?

The Colorado Department of Transportation (CDOT) was hit by a variant of the SAMSAM ransomware that encrypted files and locked 2,000 of the agency’s computers.

The city of Allentown in Pennsylvania was hit with a costly malware attack. Reports point to the long-running Emotet malware as the culprit. The attack forced city officials to shut down some critical systems, and will also cost the city an estimated US$1 mill

Vulnerable enterprise servers are being compromised by individuals or groups looking for resources to mine cryptocurrency. The latest victims are automobile-maker Tesla and users of Jenkins servers.

Users of a lightweight blogging platform maybe have had their database passwords exposed on a public log. This issue brings around DevOps concerns, as well as questions about data protection regulations and compliance.

Digital extortion is one of the most lucrative ways cybercriminals can profit in today’s threat landscape. Many have fallen victim to this particular scheme and been bilked of their money —- from ordinary users to big enterprises.

Two cryptocurrency-related security incidents occurred during the past couple of days, adding to the rising number of attacks that target digital currency.

Security researchers uncovered a new ransomware as a service named ShurL0ckr that reportedly bypasses detection mechanisms of cloud platforms.