Endpoint/Device Security

State and local governments could strengthen their cybersecurity profiles by deploying more cyber ranges, reports Government Computer News.

CISA: JasperReports flaws under active exploitation Two old security vulnerabilities impacting TIBCO Software's Java-based reporting and data analytics platform JasperReports are being leveraged in ongoing attacks, prompting their addition to the Cybersecurity and Infrastructure Security Agency's Known Exploited Vulnerabilities catalog, reports The Hacker News.

Threat actors could exploit a vulnerability in the Google Home smart speaker to facilitate the installation of a backdoor that would access the microphone feed to enable spying, BleepingComputer reports.

SecurityWeek reports that Rockwell Automation controllers have been impacted by four high-severity security flaws, which have already been covered by the Cybersecurity and Infrastructure Security Agency in advisories last week.

Organizations leveraging various Netgear WiFi router models have been urged by the networking hardware firm to promptly apply the latest firmware version to address a high-severity pre-authentication buffer overflow vulnerability, according to BleepingComputer.

German researchers were reported by The New York Times to have purchased an old U.S. military biometric data collection system dubbed 'SEEK II' from eBay for $68, SiliconAngle reports.