Endpoint/Device Security

Increasingly prevalent physical security threats against businesses have prompted cybersecurity solutions provider ZeroFox to introduce the new PSI Mobile App that would provide corporate security professionals necessary intelligence to improve physical security incident response, SiliconAngle reports.

Updates have been issued by Asus to remediate critical vulnerabilities impacting several of its router models, according to Ars Technica.

Kaspersky Lab researchers disclosed a number of vulnerabilities in a popular brand of biometrics scanners.

Old Netgear WNR614 N300 routers that reached end of life three years ago are impacted by six security vulnerabilities that could be leveraged to facilitate significant compromise, SecurityWeek reports.

Numerous Western governments, defense industry firms, and international organizations have been compromised with the novel Coathanger remote access trojan as part of an ongoing Chinese cyberespionage campaign involving the exploitation of the already addressed critical FortiGate FortiOS software vulnerability, according to CyberScoop.

SiliconAngle reports that network infrastructure devices have outranked endpoints as the riskiest connected device category this year primarily due to the accelerated growth of vulnerabilities and successful exploits against such devices since the last six months of 2023.

Vulnerable Apache RocketMQ instances impacted by the critical remote code execution bug, tracked as CVE-2023-33246, are being targeted by the Muhstik botnet to facilitate more expansive distributed denial-of-service and cryptocurrency mining intrusions, reports The Hacker News.