Endpoint/Device Security

Aside from leveraging malvertising aimed at Microsoft Teams and OneNote, AnyDesk, Google Chrome, and other widely used software, attackers also sought to spread FakeBat via social networking-based social engineering tactics and fraudulent web browser updates.

Numerous widely used iOS and macOS apps could be compromised in supply chain attacks with a trio of vulnerabilities in the CocoaPods dependency manager, all of which have already been remediated in October, The Hacker News reports.

Officials in Australia are warning travelers following the discovery of rogue Wi-Fi points in one of the nation’s airports.

Hackread reports that outdated Zyxel network-attached storage devices are being subjected to intrusions by a Mirai-like botnet exploiting the critical Python code injection flaw, tracked as CVE-2024-29973.

BleepingComputer reports that all D-Link DIR-859 routers, which have reached end-of-life, are at risk of being compromised for information disclosure, privilege escalation, and device takeovers, amid ongoing intrusions leveraging the critical path traversal vulnerability, tracked as CVE-2024-0769.

Researchers have disclosed a trio of flaws in a popular brand of machines used for blood testing.

Increasingly prevalent physical security threats against businesses have prompted cybersecurity solutions provider ZeroFox to introduce the new PSI Mobile App that would provide corporate security professionals necessary intelligence to improve physical security incident response, SiliconAngle reports.