Endpoint/Device Security

The NSA and CISA issued alerts for a critical vulnerability found in certain Citrix products. Threat actors have already successfully compromised multiple U.S. healthcare providers.

SecurityWeek reports that more than 140 security vulnerabilities have been collectively addressed by Siemens and Schneider Electric in their respective products as part of this month's Patch Tuesday.

NSA and CISA advisory details how a hacking group that has been tied to the Chinese government has been actively targeting Citrix ADC deployments.

Cisco announced that patches for a high-severity flaw impacting certain IP phone models are set to arrive next month, according to SecurityWeek.

This year’s healthcare data breach roundup spotlights the overwhelming challenges with third-party vendors in the sector and the rippling effect across entities from a singular incident.

Researchers say security teams have to always look for shifting tactics – in this case Truebot moved to an old tactic: dropping malware on USB drives.

Legitimate Android applications could be compromised with malware without the knowledge of their users who could still enjoy the apps' complete functionality using the Zombinder darknet platform, which adds an obfuscated malware loader to the application code, according to BleepingComputer.

Palo Alto Networks, Amazon Web Services, Cloudflare, Imperva, and F5 web application firewalls could be bypassed through a novel attack exploiting the JSON data sharing format, SecurityWeek reports.