Endpoint/Device Security

Exploitation attempts focused mostly on old local accounts with password-only authentication.

Check Point Software sent a letter to its customers advising them to protect security gateways with certificate-based authentication.

Intrusions infiltrating enterprise networks through Check Point Remote Access VPN instances are underway, according to BleepingComputer.

Threat actors have been distributing the novel Antidot Android banking trojan as fraudulent Google Play updates to facilitate credential compromise and other malicious actions, SecurityWeek reports.

Cryptojacking operation Kinsing, also known as H2Miner, had its botnet strengthened with the addition of new security vulnerabilities, reports The Hacker News.

CISA advises security teams to either patch immediately or simply replace the end-of-life routers.

DigiCert's Amit Sinha on how digital trust is being pushed to its limits as new innovations ramp up.

Security researchers have identified a design flaw in the IEEE 802.11 Wi-Fi standard that could allow malicious actors to trick users into connecting to less secure networks, The Hacker News reports.