Endpoint/Device Security

Numerous small office and home office routers across North America and Europe including those manufactured by Cisco, Asus, Netgear, and DayTek have been targeted by the new ZuoRAT trojan, which has successfully attacked at least 80 targets since its emergence during the last quarter of 2020.

The National Institute of Standards and Technology has finalized its macOS security guidance, which has been based on the macOS Security Compliance Project and seeks to bolster mSCP awareness.

CrowdStrike researchers discovered the exploitation of a zero-day vulnerability impacting the Mitel VoIP appliance in a suspected ransomware attack.

Google Threat Analysis Group researchers disclosed that Android and iOS device users in Italy and Kazakhstan have been targeted by Italian spyware company RCS Labs, which has partnered with internet service providers to spread malicious apps.

While connections between devices are secure, a person scanning a QR code is subject to the social engineering frailties of a human being.

This week, medical device alerts from CISA urge healthcare entities to apply software updates for some OFFIC DCMTK and Hillrom Welch Allyn medical devices to remediate several vulnerabilities.

TechCrunch reports that Washington, D.C.-based cybersecurity startup GreyNoise Intelligence has secured a $15 million investment from a Series A funding round, which will be allocated toward strengthening its threat intelligence-gathering capabilities.