Endpoint/Device Security

Keyboard keystroke data has been exfiltrated with 95% accuracy in a novel side-channel attack technique involving a deep learning model trained using a smartphone-integrated microphone, BleepingComputer reports.

Sixty-three security vulnerabilities have been identified by Cisco Talos in Milesight's UR32L industrial routers, SecurityWeek reports.

Ivanti has confirmed that its end-of-life MobileIron Core versions 11.2 and older are being impacted by a new critical authentication bypass vulnerability, which could be leveraged to compromise mobile device users' personally identifiable information and enable webshell deployment in impacted servers, reports BleepingComputer.

Almost all modern CPUs could be compromised with the novel Collide+Power side-channel attack to facilitate data leaks, according to SecurityWeek.

Organizations have been warned by the Cybersecurity and Infrastructure Security Agency regarding the exploitation of two vulnerabilities in the Ivanti Endpoint Manager Mobile, previously known as MobileIron Core, between April and July, BleepingComputer reports.

Malware security threats against operational technology and Internet of Things environments rose by 20-fold during the past six months, according to SiliconAngle.

Minecraft servers are being compromised with attacks leveraging the BleedingPipe remote code execution flaw in various Minecraft mods, which seek to facilitate total device takeovers, BleepingComputer reports.