Endpoint/Device Security

U.S. critical infrastructure organizations have been urged by the Cybersecurity and Infrastructure Security Agency to determine communications equipment deemed high risk by the Federal Communications Commission and strengthen their network security, according to SecurityWeek.

Exploitations of years-old unpatched vulnerabilities in TBK and MVPower digital video recording devices have significantly increased during the past week, BleepingComputer reports.

More than 500,000 devices around the world have been compromised with variants of the S1deload Stealer and SYS01stealer and other information-stealing malware over the last three months as part of a Vietnamese threat actor's malverposting campaign, according to The Hacker News.

Windows devices are being hijacked in attacks with the novel LOBSHOT remote access trojan, which is being deployed through Google Ads, reports BleepingComputer.

Ranked 10.0, one of two vulnerabilities in the universal copy service of certain Illumina genome sequencing products could allow an attacker to listen in on all IP addresses.

Vulnerable TP-Link Archer AX21 routers have been targeted by the Mirai botnet malware to expand its network using the CVE-2023-1389 flaw, which was first identified in December, reports The Record, a news site by cybersecurity firm Recorded Future.

VMware released security updates and workarounds on April 25 for vulnerabilities in two of its products, one of which could lead to remote code execution.