Endpoint/Device Security

Teams must tightly control IE mode and educate the staff about social engineering to safeguard devices.

Apple has increased financial rewards for zero-click remote code execution vulnerabilities by twofold to $2 million as part of an updated bug bounty program, Security Affairs reports.

The attacks came from the same subnet, indicating that it was coordinate, not random scanning.

A deeper analysis found that all the firewall configurations were compromised, not just 5% of users as first reported.

Cybernews reports that Microsoft Teams has been increasingly leveraged by cybercriminals and state-backed threat actors to facilitate illicit cyber activity.

Newly emergent Shuyal Stealer malware could pilfer login credentials from 19 different web browsers, including Google Chrome, Microsoft Edge, Opera and Opera GX, Epic, Waterfox, Vivaldi, and Yandex, GBHackers News reports.

Legislation strengthening the California Consumer Privacy Act of 2018 by requiring web browsers to provide a simple, universal opt-out tool for consumers who do not want their data sold to third parties has been signed into law by Gov. Gavin Newsom, reports The Record, a news site by cybersecurity firm Recorded Future.

High-performance computer mice could be transformed into clandestine listening devices through the new Mic-E-Mouse side-channel attack technique, which involves the exploitation of their highly sensitive optical sensors, reports HackRead.