Endpoint/Device Security

Threat actors could exploit several vulnerabilities in ultra-wideband real-time locating systems widely used in industrial, healthcare, mass transit, and smart city settings to facilitate man-in-the-middle attacks and geo-location data modifications, reports BleepingComputer.

Developers of the SOVA Android banking trojan have been continuously updating the malware to expand its capabilities, most recently implementing a ransomware module on the 5.0 version, according to BleepingComputer.

Cybersecurity groups SEKOIA and Trend Micro have released reports detailing the activities of China-based advanced persistent threat actor Lucky Mouse and its use of a trojanized version of the MiMi chat application to attack systems, according to The Hacker News.

At least 9,000 exposed virtual network computing endpoints have been found by security weakness hunters at Cyble, and since they don't require authorization or passwords to use, it is simple for threat actors to access internal networks, BleepingComputer reports.

SecurityWeek reports that CVE-2022-27255, a high severity security vulnerability that affects Realtek eCos SDK, could allow remote attackers to get arbitrary code execution or cause networking devices that use the SDK to crash.

An ongoing phishing campaign is targeting the healthcare sector with malspam emails that appear as legitimate Evernote sites, in an attempt to harvest credentials.

SecurityWeek reports that organizations have been warned about two critical NetModule Router Software vulnerabilities, which could be exploited to evade authentication and obtain administrative access.

In the last year, the FDA has signaled that the responsibility of medical device security is moving to manufacturers, designing with security in mind; an effort that could address systemic issues.