Endpoint/Device Security

NSA and CISA advisory details how a hacking group that has been tied to the Chinese government has been actively targeting Citrix ADC deployments.

Cisco announced that patches for a high-severity flaw impacting certain IP phone models are set to arrive next month, according to SecurityWeek.

This year’s healthcare data breach roundup spotlights the overwhelming challenges with third-party vendors in the sector and the rippling effect across entities from a singular incident.

Researchers say security teams have to always look for shifting tactics – in this case Truebot moved to an old tactic: dropping malware on USB drives.

Legitimate Android applications could be compromised with malware without the knowledge of their users who could still enjoy the apps' complete functionality using the Zombinder darknet platform, which adds an obfuscated malware loader to the application code, according to BleepingComputer.

Palo Alto Networks, Amazon Web Services, Cloudflare, Imperva, and F5 web application firewalls could be bypassed through a novel attack exploiting the JSON data sharing format, SecurityWeek reports.

New cybersecurity features are set to be released by Apple in a bid to strengthen data protection amid increasing threats, with Advanced Data Protection expected to be released as part of an iCloud update by the end of the year, with global rollout poised to begin in 2023, SiliconAngle reports.

Linux devices are being hacked in Bring Your Own Filesystem attacks exploiting the open-source Linux PRoot utility, BleepingComputer reports.