Enterprise networks compromised through the exploitation of a recently patched Fortinet vulnerability, tracked as CVE-2022-30684, are having their access sold by initial access brokers over the web, according to SecurityWeek.
Acer has released a BIOS update addressing a high-severity vulnerability, tracked as CVE-2022-4020, that could be exploited to enable UEFI Secure Boot deactivation on targeted devices, BleepingComputer reports.
Nozomi Networks researchers discovered that the firmware of Lanner Electronics' IAC-AST2500 baseboard management controllers is being impacted by 13 security vulnerabilities, which could be exploited to enable remote attacks against operational technology and internet of things networks, reports The Hacker News.
The Hacker News reports that threat actors have been spreading the SharkBot banking trojan through fraudulent file manager apps on the Google Play Store in an effort to evade security restrictions of the app marketplace.
No major Android device manufacturers including Samsung, Oppo, and Xiaomi have issued any updates addressing five medium-severity security vulnerabilities in Arm's Mali GPU driver, even though the flaws have been fixed by Arm from July to August, SiliconAngle reports.
Cyberespionage operation Bahamut has leveraged fake VPN apps in a malicious campaign targeted at exfiltrating sensitive data from Android devices, according to The Hacker News.
Fast Five
Selected by the SC Media Editorial team every Tuesday.
Sign up now for the top five issues cybersecurity pros need to know this week.
