Endpoint/Device Security

Increased government pressure and the emergence of software bill of materials have prompted a reduction in published vulnerabilities in extended Internet of Things devices since 2021 even as the flaws have been increasingly self-reported by device manufacturers rather than independent researchers, SecurityWeek reports.

Threat actors could chain two critical security vulnerabilities in Schneider Electric's Unity line of Modicon programmable logic controllers, tracked as CVE-2022-45788 and CVE-2022-45789, to compromise safety protections for limiting physical damage, according to The Record, a news site by cybersecurity firm Recorded Future.

Several high-severity vulnerabilities in Citrix Systems' Virtual Apps and Desktops, as well as its Workspace Apps, which could be exploited to achieve privilege escalation and system takeovers, have been patched in recently issued security updates, BleepingComputer reports.

Unit42 researchers observed three campaigns targeting a range of IoT devices to propagate its botnet and take control over vulnerable devices.

Novel info-stealing malware leveraged by North Korean hackers BleepingComputer reports the North Korean state-sponsored threat group APT37, also known as RedEyes or ScarCruft, has been launching attacks with the new M2RAT information-stealing malware aimed at compromising Windows and mobile devices since last month.

The U.S. Department of Defense Office of the Inspector General has discovered significant lapses in the Defense Department's management of mobile devices issued to its employees, reports The Register.

Critical infrastructure organizations could be at risk of compromise from the potential exploitation of 38 security vulnerabilities discovered in four different wireless industrial internet of things devices including ETIC Telecom's Remote Access Server, InHand Networks InRouter 302 and InRouter 615, and Sierra Wireless Airlink Router, according to The Hacker News.