Legal action taken by Microsoft, ESET, Black Lotus Labs, Palo Alto Networks, Health-ISAC and the Financial Services-ISAC has disrupted the massive ZLoader botnet.
Dragos CEO and founder Rob Lee said his firm had “high confidence” that the malware was developed by a state actor with an intent to disrupt key infrastructure.
Fifteen million endpoints, including those supporting government agencies, news organizations, and military operations, leveraging the HP Teradici PCoIP client and agent product for Windows, macOS, and Linux are affected by critical security flaws.
These flaws could be exploited over the network and internet, requiring a low skillset, no privileges, and no interaction. The research found the robots mostly likely don’t allow security agents to be installed, so the only mitigation would be to apply the updates or completely reconfigure the devices’ operating system.
ZDNet reports that more than 15,000 Android users had their devices infected with the Sharkbot malware after downloading six fake anti-virus apps, all of which have already been removed from the Google Play store.
Intego researchers revealed that while Apple has already released emergency patches to address actively exploited zero-day code execution flaws in macOS Monterey, iPadOS, and iOS, tracked as CVE-2022-22676 and CVE-22674, it has failed to remediate the vulnerabilities in Big Sur, Catalina, and older macOS versions, reports SecurityWeek.
API security company Corsha has landed $12 million from a Series A funding round, which will be allocated toward expanding its workforce and go-to-market capabilities.
Fast Five
Selected by the SC Media Editorial team every Tuesday.
Sign up now for the top five issues cybersecurity pros need to know this week.
