Endpoint/Device Security

New CRA study points out that poor endpoint security has caused some of the most severe breaches in recent history, including Equifax, SolarWinds, Colonial Pipeline, and the attack on HCA Healthcare this past summer.

Respondents from our audience are focusing their endpoint security efforts on the idea that end users can’t be trusted to keep the bad guys out. Multifactor authentication and strong password enforcement top the list of resulting controls, requiring users to submit extra proof that they are who they say they are to weed out imposters; explore deta...

Threat actors have been leveraging malicious fake versions of the Telegram messaging app on the Google Play Store to facilitate spyware deployment on Android devices, The Hacker News reports.

Affordable Android TV boxes, including MX10 Pro 6K, Tanix TX6 TV Box, and H96 MAX X3, have been targeted by a new variant of the Pandora backdoor associated with the Mirai botnet malware to facilitate distributed denial-of-service attacks, reports BleepingComputer.

Schweitzer Engineering Laboratories' electric power management systems were found to be impacted by nine security flaws, the most severe of which could be leveraged to enable remote code execution, The Hacker News reports.

SiliconAngle reports that most cyberattacks have been deployed to target a variety of asset types, with threat actors focusing more on potential access.

Macs subjected to malicious packages in new attack campaign MacOS devices have been targeted in a new campaign involving malicious NPM, PyPI, and RubyGems packages that aimed to exfiltrate user data, according to SecurityWeek.