Endpoint/Device Security

TechCrunch reports that mobile consumer-grade stalkerware apps Highster and PhoneSpector have seemingly ended operations following a settlement between Patrick Hinchy, whose tech firm consortium was behind both apps, and the New York Attorney General last February that involved the payment of $410,000 in fines to resolve charges of aggressive spyware promotions in New York state.

Health, transportation, logistics, and transportation organizations across Italy have been targeted by the UNC4990 threat operation in a new attack campaign involving weaponized USB drives used to facilitate the distribution of malware hosted on widely used websites, reports The Hacker News.

CISA urges federal and private-sector organizations to disconnect Ivanti VPNs vulnerable to zero-day flaws.

Numerous security issues impacting Juniper Networks' Junos OS and its J-Web configuration interface leveraged by its EX switches and SRX firewalls have been resolved as part of recently issued updates, reports SecurityWeek.

More sophisticated attack techniques have been integrated into the updated version of the Zloader malware also known as Silent Night, DELoader, and Terdot distributed in a campaign almost two years after the botnet had its infrastructure disrupted, according to The Hacker News.

Mandiant and CISA say security teams should prioritize the bugs as Ivanti released patches Jan. 31.

Danny Jenkins, CEO & Co-Founder of ThreatLocker, a cybersecurity firm providing Zero Trust endpoint security, is a leading cybersecurity expert with over two decades of experience building and securing corporate networks, including roles on red and blue teams. He is dedicated to educating industry professionals about the latest cyber threats an...