Endpoint/Device Security

Acer has released a BIOS update addressing a high-severity vulnerability, tracked as CVE-2022-4020, that could be exploited to enable UEFI Secure Boot deactivation on targeted devices, BleepingComputer reports.

Nozomi Networks researchers discovered that the firmware of Lanner Electronics' IAC-AST2500 baseboard management controllers is being impacted by 13 security vulnerabilities, which could be exploited to enable remote attacks against operational technology and internet of things networks, reports The Hacker News.

The Hacker News reports that threat actors have been spreading the SharkBot banking trojan through fraudulent file manager apps on the Google Play Store in an effort to evade security restrictions of the app marketplace.

No major Android device manufacturers including Samsung, Oppo, and Xiaomi have issued any updates addressing five medium-severity security vulnerabilities in Arm's Mali GPU driver, even though the flaws have been fixed by Arm from July to August, SiliconAngle reports.

Cyberespionage operation Bahamut has leveraged fake VPN apps in a malicious campaign targeted at exfiltrating sensitive data from Android devices, according to The Hacker News.

Threats to national security have prompted the U.S. Federal Communications Commission to ban sales or imports of equipment from Chinese telecommunications firms Huawei Technologies, ZTE, and Hytera Communications, as well as Chinese surveillance manufacturers Dahua Technology and Hangzhou Hikvisionn Digital Technology, according to Reuters.

Google has moved to bolster detection and disruption of the Cobalt Strike red teaming tool that has since evolved into a remote access tool deployment system through the release of a VirusTotal collection and YARA rules, SecurityWeek reports.