Endpoint/Device Security

German researchers were reported by The New York Times to have purchased an old U.S. military biometric data collection system dubbed 'SEEK II' from eBay for $68, SiliconAngle reports.

As part of our Year in Review series, we examine how organizations struggled to obtain a holistic view of all devices and their vulnerabilities, and how to mitigate and fix them to manage risk and ensure compliance.

SecurityWeek reports that Chinese video surveillance firm Hikvision has issued firmware fixes for a critical flaw impacting two of its wireless bridge offerings, which could be exploited to facilitate remote CCTV hacking.

Security researchers caution that attacks on IoT networks by bots like Zerobot can help cybercriminals gain thousands of footholds into a network.

Group-IB researchers say Godfather uses “web fakes” to lure victims and then drain their accounts; a link to Russian-speaking threat actors hinted.

Private Minecraft servers are being targeted by the novel cross-platform botnet MCCrash, which could facilitate distributed denial-of-service attacks, according to The Hacker News.

Russian state-sponsored threat operation Fancy Bear, also known as APT28, was noted by the Cybersecurity and Infrastructure Security Agency to have infiltrated the network of a U.S. satellite communications provider with U.S. critical infrastructure clients, CyberScoop reports.

The NSA and CISA issued alerts for a critical vulnerability found in certain Citrix products. Threat actors have already successfully compromised multiple U.S. healthcare providers.