Endpoint/Device Security

SecurityWeek reports that industrial organizations have been warned by the Cybersecurity and Infrastructure Security Agency regarding eight vulnerabilities impacting Westermo Lynx 206-F2G industrial Ethernet switches.

We interview the co-founder and CTO of Fleet to understand why good, cross platform MDM/EMM has been such a challenge for so many years. Want good Windows device management? You're probably going to compromise on MacOS management. Ditto for Windows if you prioritize your Macs. Want good Linux device management? It doesn't exist. Hopefully, Fleet c...

Global attacks targeting Ivanti Connect Secure VPN appliances vulnerable to both CVE-2023-46805 and CVE-2024-21887, have been underway, with 492 of 26,000 internet-exposed devices being compromised with backdoors, reports Ars Technica. The U.S. accounted for the most number of impacted VPNs, with Germany, South Korea, China, and Japan having the next largest number of compromised devices, a report from Censys showed. Most of the infected VPNs were discovered to be hosted by Microsoft's customer cloud service. The findings also showed a credential theft backdoor among 412 hosts. "Additionally, we found 22 distinct 'variants' (or unique callback methods), which could indicate multiple attackers or a single attacker evolving their tactics," said researchers.

Apple released patches for a zero-day flaw that it said “may have been exploited” in iPhone and macOS systems.

A simple 10-line program could allow an attacker to “listen” to private machine learning processes, according to researchers from Trail of Bits.

The updated disclaimer follows Google’s agreement to settle a class-action privacy lawsuit.

SecurityWeek reports that reconnaissance scanning was conducted by almost 1.3 million IP addresses on Jan. 6, representing a substantial surge in botnet scanning from the 43,000 devices and more than 35,000 devices observed on Dec. 20 and Dec. 8, respectively, which were significantly higher than the average 10,000 to 20,000 devices observed to conduct scans daily.

The U.S., Australia, India, and the UK are having their government institutions subjected to new attacks by Chinese advanced persistent threat operation Volt Typhoon leveraging a pair of critical vulnerabilities in end-of-life Cisco small business RV320/325 VPN routers, tracked as CVE-2019-1652 and CVE-2019-1653, according to SecurityWeek.