Mobile & Wireless
Medical infusion pumps available via secondary market sources contain Wi-Fi configuration settings from the original organization.
Hi, what are you looking for?
SecurityWeek
Mobile & Wireless
The patches resolve a critical vulnerability in Android’s System component that could lead to privilege escalation.
Mobile & Wireless
Apple released iOS and macOS updates to patch a zero-day vulnerability (CVE-2026-86950) reported by Meta’s product security team.
Mobile & Wireless
Google announced patches for the exploited privilege escalation vulnerability (CVE-2026-58704) on September 15.
Fraud & Identity Theft
Deceptive apps in Early Access are being used by dishonest developers for their own benefit.
Mobile & Wireless
Canon says more than 200 inkjet printer models fail to properly erase Wi-Fi configuration settings.
Data Breaches
Weekly cybersecurity news roundup that provides a summary of noteworthy stories that might have slipped under the radar for the week of July 24,...
Mobile & Wireless
Apple patched another zero-day flaw used in the 'Operation Triangulation' exploit chain. iOS and macOS-powered devices are affected.
Mobile & Wireless
Apple has pulled its latest Rapid Security Response updates for iOS and macOS after users complained that they can no longer access websites.
Incident Response
Apple rolls out urgent iOS and iPadOS software updates and warned that zero-day exploitation has already been detected.
Malware & Threats
Two applications hosted on Google Play, with over 1.5 million combined downloads, were caught sending user data to servers in China.
Mobile & Wireless
Google’s July 2023 security updates for Android patches 43 vulnerabilities, including three exploited in the wild.
Mobile & Wireless
CISA adds 6 Samsung mobile device flaws to its known exploited vulnerabilities catalog and they have likely been exploited by a spyware vendor.
Malware & Threats
Malicious applications with over 30,000 installs in Google Play have infected Android devices with the Anatsa banking trojan.
Fraud & Identity Theft
The US army says soldiers says unsolicited, suspicious smartwatches are being sent to soldiers, exposing them to malware attacks.
Mobile & Wireless
A hacking group linked to the North Korean government has been caught using new malware with microphone wiretapping capabilities.
Mobile & Wireless
Russian anti-malware vendor shares technical details on spyware implant deployed as part of recent zero-click iMessage attacks.
Mobile & Wireless
Asus patched nine WiFi router security defects, including a highly critical 2018 vulnerability that exposes users to code execution attacks.
Mobile & Wireless
Google’s June 2023 security update for Android patches more than 50 vulnerabilities, including an Arm Mali GPU flaw exploited by spyware vendors.
Data Protection
Apple on Monday detailed new privacy and security features rolling out to both desktop and mobile users.
Government
Apple has denied working with any government to add backdoors to its products after Russia accused the company of helping the NSA hack iPhones.
Malware & Threats
Security researchers have discovered spyware code in 101 Android applications that had over 421 million downloads in Google Play.
Application Security
Google introduces Mobile VRP bug bounty program for vulnerabilities in its mobile applications.
Mobile & Wireless
Samsung smartphone users warned about CVE-2023-21492, an ASLR bypass vulnerability exploited in the wild, likely by a spyware vendor.
Learn how to address potential risks and not restrict AI adoption in your organization. See what a centralized AI gateway is and how it works in practice.
RegisterJoin as we decipher the world of zero trust and share war stories on securing an organization by eliminating implicit trust and continuously validating every stage of a digital interaction.
RegisterExpert Insights
As AI accelerates vulnerability discovery and exploitation, so-called virtual patching still comes down to defense-in-depth and strong application security fundamentals.
(Joshua Goldfarb)
- AI, supply-chain exposure, quantum computing and geopolitical conflict are testing security programs. Preparing for disruption must become part of day-to-day operations.
(Steve Durbin)
Agentic remediation is not an act of faith. We are talking about fixing known problems, not judgment calls about unfamiliar risk.
(Nadir Izrael)
Point-in-time audits and sampled assessments offer only snapshots; continuous control monitoring provides evidence that security controls are working today.
(Sravish Sridhar)
Every leaked credential should be dead, or dying, within sixty seconds of being found. Here's a proposal to make that the default.
(Matt Honea)