Stats & Trends

From PoC to Pwned: New Exploits Appear in Attacks Just Days After Disclosure

Recently, I  identified five Microsoft Office vulnerabilities from 2017 and 2018 that helped fuel an ongoing wave of attack campaigns. The security weaknesses were zero-days at the time of their...

Read More
Featured
Security Alert

Windows Task Scheduler ALPC Zero-Day Exploited in the Wild: What You Need to Know

Windows zero-day vulnerabilities are always big news, but the latest flaw has generated even more attention due to the way it was disclosed. On...

Read More
Sep 2018
Security Alert

A Clear Guide to L1TF and Foreshadow, the Latest Intel CPU Flaws

Security websites and news feeds are being overrun with headlines like "Son of Spectre" and "Move Over Meltdown," announcing the disclosure of L1...

Read More
Aug 2018
Security Alert

Emotet Epidemic: Infections Costing Orgs Up to $1 Million Per Incident

Last Friday, July 20, the United States Computer Emergency Readiness Team (US-CERT) issued an alert highlighting the serious threat posed by...

Read More
Jul 2018
Security Alert

Massive RAT Campaign Uses Brand-New Trick to Weaponize PDFs

Last week, researchers at Proofpoint observed a massive new malspam campaign consisting of hundreds of thousands of emails distributed by the...

Read More
Jul 2018
Security Alert

New Sextortion Scam Flaunts Real Passwords, Rakes in $250,000 in Two Weeks

In a new twist to an old scam, criminals are sending out emails claiming they've infected the recipients’ computers with malware and have used...

Read More
Jul 2018
Security Alert

Windows .SettingContent-ms Files Weaponized to Bypass Security, Deliver Malware

Legitimate file type offers attackers code execution Attackers are always on the lookout for legitimate programs or file types that can be abused...

Read More
Jul 2018
Security Alert

IQY Files Used to Evade AV, Download Malware via Excel

IQY files: Attackers have a new trick up their sleeves Researchers have spotted a fresh series of spam email campaigns taking an interesting new...

Read More
Jun 2018
Security Alert

Alert: Working Exploit Released for "Total Meltdown" Bug Introduced by Microsoft

Remember the simpler days? Before Meltdown and Spectre turned patching Windows systems into a complete mess?  This week the saga took yet another...

Read More
Apr 2018
Security Alert

Alert: Malware Being Spread via MailChimp

Criminals are always looking for new opportunities to distribute malware, and now they appear to be abusing MailChimp — one of the most popular...

Read More
Mar 2018
Security Alert

Spoofed DHL Shipment Email Express Delivers Password Stealer

Another day, another spam campaign. This time, researchers have spotted a large new wave of spam emails targeting mostly small and medium-sized...

Read More
Mar 2018