Endpoint/Device Security

Organizations have been warned by the Cybersecurity and Infrastructure Security Agency regarding the exploitation of two vulnerabilities in the Ivanti Endpoint Manager Mobile, previously known as MobileIron Core, between April and July, BleepingComputer reports.

Malware security threats against operational technology and Internet of Things environments rose by 20-fold during the past six months, according to SiliconAngle.

Minecraft servers are being compromised with attacks leveraging the BleedingPipe remote code execution flaw in various Minecraft mods, which seek to facilitate total device takeovers, BleepingComputer reports.

Fraudulent Android chat app leveraged in new Bahamut attack New social engineering attacks by Indian advanced persistent threat group Bahamut have involved the fraudulent Android chat app SafeChat to facilitate a version of the CoverIm spyware aimed at exfiltrating mobile device data, according to BleepingComputer.

Threat actors have used the AVrecon botnet malware, which was initially reported by Lumen Black Lotus to have been compromising small office/home office routers, to support the SocksEscort malware proxy service, which allows renting of hacked devices for location concealment, The Hacker News reports.

Canon warned users that sensitive information on the Wi-Fi connection settings stored in the memories of many of its popular printers may not be deleted by the usual initialization process.

Days after it emerged threat actors exploited an EPMM software flaw to attack a dozen Norwegian government ministries, a new vulnerability has been identified in the same mobile device management solution.