Endpoint/Device Security

Kasada report found that 40% of companies lost 10% of revenue or more from bot-driven account fraud, up from 5% in 2021 reporting that level of revenue loss.

The FDA user-fee legislation passed without medical device cybersecurity requirements. While disappointing, stakeholders note these efforts take time — even if awareness of the risk to healthcare is at an all-time high.

SecurityWeek reports that Microsoft has patched a security flaw in its Endpoint Configuration Manager solution, as part of an out-of-band update.

Active exploitation of a critical zero-day flaw in Sophos' firewall product has prompted Sophos to immediately issue a patch update, reports The Hacker News.

Millions of devices, including those manufactured by Microsoft, HP, Intel, Dell, Siemens, Framework, and Fujitsu, are being affected by seven firmware vulnerabilities in Insyde Software's InsydeH20 UEFI firmware, which could be exploited to facilitate persistent device access, SecurityWeek reports.

Morgan Stanley's wealth and asset management division Morgan Stanley Smith Barney has agreed to pay a $35 million fine to settle charges filed by the U.S. Securities and Exchange Commission pertaining to federal regulation violations on customer data protection and disposal, TechRepublic reports.

Medtronic MiniMed insulin pumps are vulnerable to a highly specific attack scenario that would interfere with the flow of insulin.