Endpoint/Device Security

SecurityWeek reports that two new security vulnerabilities have been identified in Contec's Flexlan FX3000 and FX2000 wireless LAN devices commonly used in airplanes, which could place passengers at risk for hacking if exploited.

HP has left six firmware security flaws in some of its enterprise notebook devices unpatched even though the vulnerabilities have been publicly disclosed months ago, according to The Hacker News.

SecurityWeek reports that numerous major industrial automation vendors have products affected by two vulnerabilities in PTC's Kepware KEPServerEX product, which could be exploited to compromise operational technology networks.

An FBI notice warns of an increasing number of exploits against unpatched and legacy medical devices, which could impact patient safety and health data privacy.

SecurityWeek reports that Baxter's Sigma Spectrum infusion pumps and Sigma WiFi batteries are impacted by five security vulnerabilities, some of which could be exploited to facilitate credential leakage.

Cisco announced that it will not release a patch to address a novel authentication bypass zero-day vulnerability impacting small business VPN routers that have already reached end-of-life, according to BleepingComputer.

Patches have been issued by Zyxel to fix a critical security flaw in its network-attached storage devices, The Hacker News reports.

BleepingComputer reports that numerous computers and internet of things devices are being infected with additional payloads by the novel stealthy Linux malware Shikitega, which has been leveraging security flaws to facilitate privilege escalation and establish persistence before initiating cryptominer deployment.