Endpoint/Device Security

Two Israeli researchers showed the Black Hat security conference how Windows Defender could be subverted to allow malware infection or even remove critical system files.

Findings presented by security researchers at the recent DEF CON security conference showed that multiple security vulnerabilities are present in the PowerPanel Enterprise Data Center Infrastructure Management software offered by CyberPower and Dataprobe's iBoot Power Distribution Unit device, which when exploited together can cause catastrophic damage to data centers that use them, reports The Hacker News.

Microsoft researchers said they worked closely with Codesys for the past several months on a patch.

Fortinet warns of high-volume flaw exploitation in Zyxel router An alert issued by Fortinet is informing the public that the Gafgyt botnet malware is currently actively being used to exploit a five-year-old vulnerability in the Zyxel P660HN-T1A router, according to BleepingComputer.

Nine other recommendations came out of the months-long Cyber Safety Review Board investigation into the threat group’s 2021-22 crime spree.

Two years after a critical 0-click exploit was found in Pixel 6 modems, Google's Android Red Team details two bugs behind the now-patched PoC attack.

Millions of Western Digital and Synology network-attached storage devices are impacted by already-patched critical security flaws, which could have been leveraged to expose millions of users' files, SecurityWeek reports.