Distributed Workforce

SiliconAngle reports that network infrastructure devices have outranked endpoints as the riskiest connected device category this year primarily due to the accelerated growth of vulnerabilities and successful exploits against such devices since the last six months of 2023.

Officials at Arlington, Massachusetts, confirmed the loss of more than $445,000 following a business email compromise attack against the town last year, reports StateScoop.Officials at Arlington, Massachusetts, confirmed the loss of more than $445,000 following a business email compromise attack against the town last year, reports StateScoop.

Threat actors have launched a new phishing campaign targeting Spanish-speaking individuals with an updated Agent Tesla malware variant, Hackread reports.

Widely known artificial intelligence email assistant EmailGPT was discovered by researchers from Synopsys' Cybersecurity Research Center to be impacted by a medium-severity prompt injection vulnerability, which could be exploited to enable data exposure, financial loss, and denial-of-service attacks, according to Hackread.

Vulnerable Apache RocketMQ instances impacted by the critical remote code execution bug, tracked as CVE-2023-33246, are being targeted by the Muhstik botnet to facilitate more expansive distributed denial-of-service and cryptocurrency mining intrusions, reports The Hacker News.

Fixes have been issued by Taiwanese networking device manufacturer Zyxel to address five security vulnerabilities impacting its NAS326 and NAS542 network-attached storage devices that have not been supported since the end of 2023, including three critical flaws that could be exploited to facilitate remote code execution and command injection attacks, according to The Register.