Endpoint/Device Security

Cybernews reports that updates have been introduced to the LightSpy surveillance tool to expand its targeting to systems running on older iterations of macOS after initially only targeting iOS devices.

Vulnerable Palo Alto Networks PAN-OS firewalls impacted by the flaw, tracked as CVE-2024-3400, have been targeted by suspected Lazarus Group-linked threat actors to distribute an updated version of the RedTail cryptocurrency mining malware since late April, according to Security Boulevard.

The botnet’s alleged operator was arrested last week and faces up to 65 years in prison.

Exploitation attempts focused mostly on old local accounts with password-only authentication.

Check Point Software sent a letter to its customers advising them to protect security gateways with certificate-based authentication.

Intrusions infiltrating enterprise networks through Check Point Remote Access VPN instances are underway, according to BleepingComputer.

Threat actors have been distributing the novel Antidot Android banking trojan as fraudulent Google Play updates to facilitate credential compromise and other malicious actions, SecurityWeek reports.