Endpoint/Device Security

Amazon's security camera firm Ring has been purported to be compromised by the ALPHV ransomware operation, also known as BlackCat, which has threatened to expose the stolen data, reports Motherboard.

Critical infrastructure entities gain CISA support to identify and patch known vulnerabilities.

Threat actors have been exploiting remote desktop program vulnerabilities to facilitate PlugX malware delivery, The Hacker News reports.

Vulnerable Oracle WebLogic servers are being subjected to cryptojacking attacks by the cryptomining operation 8220 Gang using the ScrubCrypt crypter, reports The Hacker News.

The Biden administration’s national cyber strategy is a bold effort to strengthen cybersecurity across critical infrastructure. But low-resourced sectors will need broad support to meet the lofty goals.

Aqua researchers discovered that Jenkins open source automation servers are being impacted by two severe vulnerabilities dubbed "CorePlague," which could be exploited to facilitate arbitrary code execution, reports The Hacker News.