Security | Threat Detection | Cyberattacks | DevSecOps | Compliance

Many common password attack methods are quite straightforward — much like trying various physical keys to open the lock on a door. For example, in brute force attacks, adversaries systematically guess passwords until they find the correct one. Or instead of simply guessing, they can use a list of username/password combinations leaked from other breaches (credential stuffing) or cycle through known usernames combined with commonly used passwords (password spraying).

Earth Koshchei executes rogue RDP attacks, Zscaler releases technical details about RiseLoader malware, and Corvus issues a ransomware advisory.

The holiday season is a time when hardworking employees relax — and hardworking threat actors look for their next victims. As workers buy more products online, take seasonal trips, and give in to holiday distractions, large organizations become tempting targets for cyber attacks. Phishing, ransomware, and similar threats may be even more effective than usual in the last few months of the year. That means the impact of cyber attack strategies can also be more significant.

An IoT denial of service attack overwhelms devices with traffic, making them unresponsive. This article explains these attacks and offers strategies to protect your devices.