Endpoint/Device Security

Threat actors could leverage 34 newly identified vulnerable Windows Driver Model and Windows Driver Framework drivers to facilitate system process manipulation, persistence, and total device takeovers without being detected by security software, according to SecurityWeek.

Researchers speculate that Chinese authorities may be responsible for turning off one of the internet’s most prolific IoT botnets.

As cars have become more digital, privacy threats have emerged, but there are proactive steps the car companies can take to keep motorists safe.

Critical 9.4 vulnerability lets attackers steal the token of recently connected users, allowing the attacker to gain access to whatever resources the user has permissions to access in Citrix.

Malicious Android apps on Google Play that included adware have been downloaded more than two million times, reports BleepingComputer.

BleepingComputer reports that French government agencies, universities, businesses, research institutes, and think tanks had their networks compromised by Russian state-sponsored threat operation APT28, also known as Fancy Bear and Strontium, in cyberespionage attacks that commenced during the last six months of 2021.

Vulnerable Citrix NetScaler Application Delivery Controller and NetScaler Gateway instances impacted by the recently remediated critical severity Citrix Bleed information disclosure bug, tracked as CVE-2023-4966, could have their authentication session cookies stolen and be hijacked through a new proof-of-concept exploit discovered by Assetnote researchers, reports BleepingComputer.

University researchers say most Apple macOS and IOS devices are vulnerable to iLeakage, but security pros say most companies are not at high risk because exploiting the flaw requires highly skilled reverse engineering skills.