Dark Reading is part of the Informa Tech Division of Informa PLC

This site is operated by a business or businesses owned by Informa PLC and all copyright resides with them.Informa PLC's registered office is 5 Howick Place, London SW1P 1WG. Registered in England and Wales. Number 8860726.

Dark Reading Radio

Pay Up Or Never See Your Data Again: Ransomware Raises The Stakes
Date / Time: Wednesday, June 04, 2014, 1:00 PM New York/10:00 AM San Francisco
Click here to register
Overview:

Youve heard the stories, or maybe know someone who has experienced having their laptop or workstation held for ransom by criminals you cant even see but have literally locked out the victim with nasty ransomware malware, demanding payment to release it. The most onerous such threat is CryptoLocker, which encrypts the victims local drive and network shares with strong asymmetric encryption and demands the victim pay a fee to unlock them. And even if you dutifully pay the ransom fee to the attacker, theres no guarantee you will ever retrieve the data on your machine.

So how can you prevent or defend against this nasty and more destructive form of ransomware? In this episode of Dark Reading Radio, Lance James, a renowned security expert and head of cyber intelligence at Deloitte & Touche, will provide a peek at his upcoming presentation for Black Hat USA on new research and developments on how the threat intelligence community has responded to CryptoLocker such as the creation of a near-time tracking of the ransomware operations infrastructure, and what can be done in the future to defend against this potentially devastating attack.



Speaker(s):
Lance James, renowned security expert and head of cyber intelligence at Deloitte & Touche.
Edge-DRsplash-10-edge-articles
I Smell a RAT! New Cybersecurity Threats for the Crypto Industry
David Trepp, Partner, IT Assurance with accounting and advisory firm BPM LLP,  7/9/2021
News
Attacks on Kaseya Servers Led to Ransomware in Less Than 2 Hours
Robert Lemos, Contributing Writer,  7/7/2021
Commentary
It's in the Game (but It Shouldn't Be)
Tal Memran, Cybersecurity Expert, CYE,  7/9/2021
Register for Dark Reading Newsletters
White Papers
Video
Cartoon
Current Issue
The Promise and Reality of Cloud Security
Cloud security has been part of the cybersecurity conversation for years but has been on the sidelines for most enterprises. The shift to remote work during the COVID-19 pandemic and digital transformation projects have moved cloud infrastructure front-and-center as enterprises address the associated security risks. This report - a compilation of cutting-edge Black Hat research, in-depth Omdia analysis, and comprehensive Dark Reading reporting - explores how cloud security is rapidly evolving.
Flash Poll
Twitter Feed
Dark Reading - Bug Report
Bug Report
Enterprise Vulnerabilities
From DHS/US-CERT's National Vulnerability Database
CVE-2022-45172
PUBLISHED: 2023-01-31
An issue was discovered in LIVEBOX Collaboration vDesk before v018. Broken Access Control can occur under the /api/v1/registration/validateEmail endpoint, the /api/v1/vdeskintegration/user/adduser endpoint, and the /api/v1/registration/changePasswordUser endpoint. The web application is affected by ...
CVE-2022-47697
PUBLISHED: 2023-01-31
COMFAST (Shenzhen Sihai Zhonglian Network Technology Co., Ltd) CF-WR623N Router firmware V2.3.0.1 and before is vulnerable to Account takeover. Anyone can reset the password of the admin accounts.
CVE-2022-47698
PUBLISHED: 2023-01-31
COMFAST (Shenzhen Sihai Zhonglian Network Technology Co., Ltd) CF-WR623N Router firmware V2.3.0.1 is vulnerable to Cross Site Scripting (XSS) via the URL filtering feature in the router.
CVE-2022-47699
PUBLISHED: 2023-01-31
COMFAST (Shenzhen Sihai Zhonglian Network Technology Co., Ltd) CF-WR623N Router firmware V2.3.0.1 is vulnerable to Incorrect Access Control.
CVE-2022-47700
PUBLISHED: 2023-01-31
COMFAST (Shenzhen Sihai Zhonglian Network Technology Co., Ltd) CF-WR623N Router firmware V2.3.0.1 and before is vulnerable to Incorrect Access Control. Improper authentication allows requests to be made to back-end scripts without a valid session or authentication.