In this blog, the global experts across our Rapid7 Labs and Managed Services teams share real-time vulnerability insights and threat intelligence so that our customers can anticipate and prevent breaches, pinpoint critical threats, and confidently take command of their attack surface.
The Rapid7 Labs team has rounded up statistics and trends that caught their eye throughout the year, spanning ransomware, initial access vectors, common malware strains, notable CVE exploitation, and more.
Read more…
Source: Rapid7
Related:
- CardioComm, a provider of ECG monitoring devices, confirms cyberattack downed its services
July 26, 2023
CardioComm Solutions, a Canadian provider of consumer and professional-grade heart monitoring technologies, has been downed by an ongoing cybersecurity incident. The Toronto-based organization said on Tuesday that its business operations will be “impacted for several days and potentially longer” following a “cybersecurity incident on the Company’s servers.” Read more… Source: TechCrunch
- Ortivus’ electronic patient record system are down for some United Kingdom based customers due to a cyber-attack
July 26, 2023
On the evening of 18 July Ortivus’ systems were subject to a cyber-attack affecting UK customer systems within our hosted datacenter environment. The electronic patient records are currently unavailable and are until further notice handled using manual systems. No patients have been directly affected. No other systems have been attacked and no customers outside of those ...
- CISA Releases Analysis of FY22 Risk and Vulnerability Assessments
July 26, 2023
CISA has released an analysis and infographic detailing the findings from the 121 Risk and Vulnerability Assessments (RVAs) conducted across multiple critical infrastructure sectors in fiscal year 2022 (FY22). The analysis details a sample attack path including tactics and steps a cyber threat actor could follow to compromise an organization with weaknesses representative of those CISA ...
- Wuhan Earthquake Monitoring Center suffers cyberattack from the US; investigation underway
July 26, 2023
The Wuhan Earthquake Monitoring Center has recently suffered a cyberattack launched by an overseas organization, the city’s emergency management bureau which the center is affiliated to said in a statement on Wednesday. This is another case of its kind following the June 2022 cyberattack from overseas against a Chinese university. The expert panel on the case ...
- Hibernating Qakbot: A Comprehensive Study and In-depth Campaign Analysis
July 25, 2023
In the ever-evolving landscape of cyber threats, banking trojans continue to pose a significant risk to organizations worldwide. Among them, Qakbot, also known as QBot or Pinkslipbot, stands out as a highly sophisticated and persistent malware active since 2007, targeting businesses across different countries. With a primary focus on stealing financial data and login credentials from ...
- Securing Digital Technologies of the Next Generation of Nuclear Reactors
July 25, 2023
All innovations bring potential benefits that could transform industries, but they also bring potential risks. In the nuclear field, advanced nuclear reactors, including small modular reactors (SMRs), are incorporating innovative technologies, particularly digital technologies that yield novel solutions. There is growing interest in SMRs. These advanced nuclear reactors have a limited power capacity — typically ...