A targeted mobile phishing (mishing) campaign was observed that leveraged a DocuSign impersonation scheme that aimed to harvest corporate credentials from company executives. ZimperiumLabs reported Dec. 18 that the DocuSign campaign was similar to a pattern of spear phishing attempts that enterprises have been tracking in which attackers specifically target the mobile devices of their … Read more
Dec 11, 2024Ravie LakshmananVulnerability / Network Security Ivanti has released security updates to address multiple critical flaws in its Cloud Services Application (CSA) and Connect Secure products that could lead to privilege escalation and code execution. The list of vulnerabilities is as follows – CVE-2024-11639 (CVSS score: 10.0) – An authentication bypass vulnerability in the … Read more
The Federal Communications Commission (FCC) on Dec. 5 responded to recent reports that the Chinese group Salt Typhoon infiltrated at least eight U.S. telecom companies by proposing that carriers create, update and implement cybersecurity risk management plans annually to the FCC, or face stiff penalties. FCC Chairwoman Jessica Rosenworcel said the agency had this authority … Read more
Cradlepoint announced its phased rollout strategy for the industry’s first 5G-optimised Secure Access Service Edge (SASE) solution designed for the enterprise and purpose-built for Wireless Wide Area Network (WAN) deployments. With unique cellular capabilities and the simplicity of Cradlepoint’s cloud-based management platform, NetCloud Manager, Cradlepoint 5G SASE features zero trust, cellular intelligence along with cloud … Read more
The number of Internet of Things (IoT) end-user devices and IoT edge nodes such as home appliances, personal wearables, industrial robots, and even connected drones is quickly increasing. ABI Research forecasts that by 2026, the installed base of connected devices will reach more than 70 billion installations, creating an expansive IoT attack vector in the … Read more