Distributed Workforce

The U.S. has been accused by Chinese state-controlled newspaper Global Times of infiltrating Wuhan-based earthquake monitoring equipment with a trojan program that could allegedly prompt seismic intensity data theft and manipulation, which it claims to be a serious national security threat, reports The Record, a news site by cybersecurity firm Recorded Future.

Malicious actors could fully takeover 926,000 MikroTik RouterOS routers vulnerable to a critical SuperAdmin privilege escalation flaw, tracked as CVE-2023-30799, BleepingComputer reports.

Patches have been issued by Ivanti for a zero-day authentication bypass flaw in its Endpoint Manager Mobile device management software previously known as MobileIron Core, which has already been actively exploited by threat actors, BleepingComputer reports.

DHS Inspector General Joseph Cuffari said he regularly deletes texts on his government-issued iPhone and does not believe he is required to preserve them under federal records laws.

Apple released several new security updates Monday for vulnerabilities affecting its iOS, iPadOS, macOS, tvOS and watchOS, including one CVE that “may have been actively exploited” in devices running all of those operating systems.

Multiple Zyxel firewall devices unpatched against the critical vulnerability, tracked as CVE-2023-28771, have been targeted by numerous distributed denial-of-service botnets, including the Mirai-based Dark.IoT and novel Katana botnets, reports The Hacker News.

Here are four ways to protect the organization from AI-based phishing attacks.