Uyghurs in China and around the world have been targeted by two prolonged surveillance campaigns leveraging Android spyware tools BadBazaar and new MOONSHINE variants that sought to monitor individuals' whereabouts and exfiltrate sensitive data, according to The Hacker News.
Security updates have been issued by Citrix to fix three vulnerabilities, including a critical authentication bypass bug, impacting its Application Delivery Controller and Gateway offerings, The Hacker News reports.
Swedish-Swiss electrical equipment manufacturer ABB has released an update addressing a high-severity flaw in its flow computers, which are being widely used by major oil and gas utilities around the world, according to The Record, a news site by cybersecurity firm Recorded Future.
SecurityWeek reports that numerous security vulnerabilities have been addressed by Siemens and Schneider Electric as part of this month's Patch Tuesday.
Healthcare organizations still need Code Dark protocols for emergencies, but along with support from the medical device community, there are practical steps security teams can take to improve device security, including embracing automation and the latest monitoring technology.
Policy options developed by Sen. Mark Warner advocates for a number of incentive programs and workforce development initiatives to target systemic healthcare cybersecurity challenges.
Lookout reported that 50% of the phishing attacks aimed at the mobile devices of federal, state and local government workers in 2021 sought to steal credentials — up from 30% a year ago.
Fast Five
Selected by the SC Media Editorial team every Tuesday.
Sign up now for the top five issues cybersecurity pros need to know this week.
