Remove 2021 Remove Architecture Remove Encryption
article thumbnail

Ghost Ransomware a Persistent Global Threat to Critical Infrastructure

SecureWorld News

Ghost ransomware actors, identified as operating from China, have been targeting unpatched systems and stolen credentials to infiltrate networks, encrypt data, and demand ransom payments. Prioritize fixing vulnerabilities exploited by Ghost, such as ProxyShell (CVE-2021-34473, CVE-2021-34523, CVE-2021-31207).

article thumbnail

Top 10 web application vulnerabilities in 2021–2023

SecureList

Profile of participants and applications We collected the data from a sample of the application security assessment projects our team completed in 2021–2023. More than a third (39%) used the microservice architecture. Server-Side Request Forgery (SSRF) The popularity of the cloud and microservice architectures is on the rise.

Passwords 140
Insiders

Sign Up for our Newsletter

This site is protected by reCAPTCHA and the Google Privacy Policy and Terms of Service apply.

article thumbnail

IT threat evolution Q2 2021

SecureList

Communication with the server can take place either over raw TCP sockets encrypted with RC4, or via HTTPS. While analyzing the CVE-2021-1732 exploit, first discovered by DBAPPSecurity Threat Intelligence Center and used by the BITTER APT group, we found another zero-day exploit that we believe is linked to the same threat actor.

article thumbnail

LastPass: Password Manager Review for 2021

eSecurity Planet

Also read: Dashlane vs LastPass: Compare Top Password Managers for 2021. Encrypted user vaults were not jeopardized, but there was still a considerable risk that hackers could gain access using the compromised data if users didn’t change their passwords again. LastPass advantages: flexibility and user interface. LastPass pricing.

article thumbnail

IT threat evolution Q1 2021

SecureList

On March 2, Microsoft released out-of-band patches for four zero-day vulnerabilities in Exchange Server that are being actively exploited in the wild (CVE-2021-26855, CVE-2021-26857, CVE-2021-26858 and CVE-2021-27065). Ransomware encrypting virtual hard disks. macOS developments.

Malware 139
article thumbnail

ÆPIC Leak is the first CPU flaw able to architecturally disclose sensitive data

Security Affairs

Researchers uncovered a new flaw, dubbed ÆPIC, in Intel CPUs that enables attackers to obtain encryption keys and other secret information from the processors. The ÆPIC Leak ( CVE-2022-21233 ) is the first architecturally CPU bug that could lead to the disclosure of sensitive data and impacts most 10th, 11th and 12th generation Intel CPUs.

article thumbnail

Top Database Security Solutions for 2021

eSecurity Planet

Security services and tools include anti-DDoS , SOCaaS , web application firewalls (WAF), data encryption , and more. Other features include applying secure socket layer (SSL) or transport layer security (TLS) and AES-256 encryption. Also Read: Best Encryption Software & Tools for 2021. EnterpriseDB.

Firewall 122