Endpoint/Device Security

SecurityWeek reports that Chinese video surveillance firm Hikvision has issued firmware fixes for a critical flaw impacting two of its wireless bridge offerings, which could be exploited to facilitate remote CCTV hacking.

Security researchers caution that attacks on IoT networks by bots like Zerobot can help cybercriminals gain thousands of footholds into a network.

Group-IB researchers say Godfather uses “web fakes” to lure victims and then drain their accounts; a link to Russian-speaking threat actors hinted.

Private Minecraft servers are being targeted by the novel cross-platform botnet MCCrash, which could facilitate distributed denial-of-service attacks, according to The Hacker News.

Russian state-sponsored threat operation Fancy Bear, also known as APT28, was noted by the Cybersecurity and Infrastructure Security Agency to have infiltrated the network of a U.S. satellite communications provider with U.S. critical infrastructure clients, CyberScoop reports.

The NSA and CISA issued alerts for a critical vulnerability found in certain Citrix products. Threat actors have already successfully compromised multiple U.S. healthcare providers.

SecurityWeek reports that more than 140 security vulnerabilities have been collectively addressed by Siemens and Schneider Electric in their respective products as part of this month's Patch Tuesday.