Endpoint/Device Security

Apple released Rapid Security Responses on Monday for the latest versions of iOS, iPadOS and macOS to address a zero-day that may have been actively exploited.

SecurityWeek reports that industrial organizations could be impacted by severe remote hacking attacks leveraging nine security vulnerabilities in PiiGAB's M-Bus 900s gateway/converter instances.

One of the patches follows CISA listing it on the Known Exploited Vulnerabilities (KEV) catalog in the spring.

Cisco advised customers to disable the encryption feature in the switches, as no patches or workaround are yet available.

Manifest confusion issues in NPM packages which could raise malware distribution risk could be discovered by a new Python-based tool developed by sysadmin Felix Pankratz, reports BleepingComputer.

Healthcare organizations across the U.S. have been warned by the Cybersecurity and Infrastructure Security Agency regarding a critical vulnerability in Medtronic's Paceart Optima cardiac device data storage system, reports The Record, a news site by cybersecurity firm Recorded Future.

Financial services organizations around the world, especially banks in Spain and Chile, have been subjected to an Android malware campaign by the Mexico-based threat actor Neo_Net between June 2021 and April 2023, reports The Hacker News.