Distributed Workforce

New CRA study points out that poor endpoint security has caused some of the most severe breaches in recent history, including Equifax, SolarWinds, Colonial Pipeline, and the attack on HCA Healthcare this past summer.

Respondents from our audience are focusing their endpoint security efforts on the idea that end users can’t be trusted to keep the bad guys out. Multifactor authentication and strong password enforcement top the list of resulting controls, requiring users to submit extra proof that they are who they say they are to weed out imposters; explore deta...

Iranian government-linked APT Charming Kitten deployed a new backdoor malware in attacks against a broad range of organizations, mainly in Israel.

Threat actors have been leveraging malicious fake versions of the Telegram messaging app on the Google Play Store to facilitate spyware deployment on Android devices, The Hacker News reports.

Threat actors have been deploying new phishing attacks exploiting Google Looker Studio in a bid to evade security defenses, according to SecurityWeek.

While only 224 users were affected, security pros raised eyebrows because the victims could have been prominent journalists and editors.

Affordable Android TV boxes, including MX10 Pro 6K, Tanix TX6 TV Box, and H96 MAX X3, have been targeted by a new variant of the Pandora backdoor associated with the Mirai botnet malware to facilitate distributed denial-of-service attacks, reports BleepingComputer.

Two separate phishing campaigns have been distributing the new variants of the SideTwist and AgentTesla backdoors, according to The Hacker News.