Endpoint/Device Security

Updated Roaming Mantis malware involves DNS changer Threat actors behind the Roaming Mantis credential theft and malware distribution campaign have added a DNS changer to their Wroba.o/XLoader Android malware, which enables DNS settings modification on targeted WiFi routers to facilitate further infections, according to BleepingComputer.

Both Netcomm and TP-Link routers have been reported by the CERT Coordination Center to be affected by critical bugs, some of which could be leveraged for remote code execution, reports The Hacker News.

Nozomi Networks reported that wiper malware, IoT botnet activity, and the Russia-Ukraine war significantly influenced the threat landscape last year.

More than 4,000 internet-connected Sophos Firewall devices continue to have the critical remote code execution flaw, tracked as CVE-2022-3236, unpatched despite the release of hotfixes last September and the issuance of official patches in December, reports BleepingComputer.

New legislation that would subject period tracking apps to privacy regulations has been introduced by Washington state Rep. Vandana Slatter, D-48th District, amid growing concerns surrounding the lack of federal privacy protections for such apps following the reversal of Roe v. Wade ruling last June, reports The Associated Press.

The integration combines Lookout’s support for Android, iOS and Chrome OS devices into the Ivanti Go app, consolidating endpoint management and security functions.

SecurityWeek reports that pro-Ukraine hacktivist group GhostSec is having its claims of launching the first-ever ransomware attack against an industrial control system device questioned by cybersecurity experts.