Researchers report finding a new banking trojan, dubbed "Medusa," targeting Android devices that uses the same file names as the Cabassous malware, AKA FluBot.
The recent advisory offers free patches for small businesses looking to protect themselves against arbitrary code execution, privilege escalation, and denial of service attacks.
The interoperability push is well underway in the healthcare sector. An ONC update on FHIR endpoint implementation shows progress is being made in publishing endpoint lists, as the agency considers a more standardized approach.
Researchers say attackers can use the bugs in the Unified Extensible Firmware Interface (UEFI) to launch code execution with system management mode privileges.
During an Aspen Institute fellowship presentation, CISA’s tech and cyber strategy lead urged the FDA to mandate cybersecurity requirements for medical device manufacturers to protect patient safety.
Examples of cyber criminals utilizing multi-factor authentication (MFA) tokens and authenticator apps is a growing trend, according to one cybersecurity expert.
This week in the Security News: Temporary phones, webcam hacks that are so much more, bags of cash, patch Wordpress plugins and patch them some more, crowd-sourced-government-funded vulnerability scanning, hiding deep in UEFI and bouncing off the moon, even more UEFI vulnerabilities, if Samaba were a fruit it would be....well vulnerable for one thi...
This Week in the Security News: UPnP strikes back, Lazarus, Samba, CISA, SMS Scams, secret pixels, OMB Zero Trust, and Wordle, along with the Expert Commentary of Jason Wood on this edition of the Security Weekly News!
Fast Five
Selected by the SC Media Editorial team every Tuesday.
Sign up now for the top five issues cybersecurity pros need to know this week.
