Endpoint/Device Security

Two of vulnerabilities are rated critical and could lead to remote code execution, while the third could cause a denial-of-service attack.

Exploitation of a six-year-old vulnerability by notorious Russian cyber espionage group APT28 highlights the risks organizations face keeping up with patch management.

Nearly a dozen farms at Israel's Jordan Valley as well as Galil Sewage Corporation's wastewater treatment control systems have been disrupted following cyberattacks targeted at programmable logic controllers by Israeli firm Unitronics, according to SecurityWeek.

Expected on April 17, NIST is inviting healthcare stakeholder groups to participate in its upcoming project aimed at securing cybersecurity risks in telehealth smart home devices.

An Android zero-day that exploited millions of devices via a Chinese ecommerce app was added to CISA's catalog of known exploited vulnerabilities.

BleepingComputer reports that compromised Virtual Private Servers have been increasingly used to facilitate more powerful distributed denial-of-service attacks during the first three months of 2023.

Two federal agencies urge the public to use caution when using USB charging ports in places like airports or risk privacy threats and malware.