The chair of the Senate Intelligence Committee told an audience of healthcare professionals on Thursday that they should expect blowback from Russian cyber operations in the near future.
Legal action taken by Microsoft, ESET, Black Lotus Labs, Palo Alto Networks, Health-ISAC and the Financial Services-ISAC has disrupted the massive ZLoader botnet.
Dragos CEO and founder Rob Lee said his firm had “high confidence” that the malware was developed by a state actor with an intent to disrupt key infrastructure.
Fifteen million endpoints, including those supporting government agencies, news organizations, and military operations, leveraging the HP Teradici PCoIP client and agent product for Windows, macOS, and Linux are affected by critical security flaws.
These flaws could be exploited over the network and internet, requiring a low skillset, no privileges, and no interaction. The research found the robots mostly likely don’t allow security agents to be installed, so the only mitigation would be to apply the updates or completely reconfigure the devices’ operating system.
ZDNet reports that more than 15,000 Android users had their devices infected with the Sharkbot malware after downloading six fake anti-virus apps, all of which have already been removed from the Google Play store.
Intego researchers revealed that while Apple has already released emergency patches to address actively exploited zero-day code execution flaws in macOS Monterey, iPadOS, and iOS, tracked as CVE-2022-22676 and CVE-22674, it has failed to remediate the vulnerabilities in Big Sur, Catalina, and older macOS versions, reports SecurityWeek.
Fast Five
Selected by the SC Media Editorial team every Tuesday.
Sign up now for the top five issues cybersecurity pros need to know this week.
