Endpoint/Device Security

Seven malicious Python Package Index packages, which amassed nearly 7,500 downloads prior to their removal, have been leveraged by threat actors to facilitate the exfiltration of cryptocurrency wallet recovery passwords.

Roku had accounts from 15,363 customers compromised following a credential stuffing attack between late December and late February.

The critical flaw is an authentication bug could let users compromise the security of the system.

Security pros say the zero-days are serious because nation-states tend to exploit flaws to launch spyware attacks on high-risk individuals.

Numerous delivery servers leveraged by Predator spyware have been taken down by the spyware's operators following separate.

Cybersecurity experts have lauded the National Institute of Standards and Technology's newly released Cybersecurity Framework 2.0 for expanded coverage and additional resources.