Tag: endpoint security
36 articles
Fortinet Fixes Exploited Flaw in FortiClient EMS Software
Fortinet has urgently patched a critical vulnerability in its FortiClient EMS software, which had already been exploited in the wild, to prevent further security breaches. The flaw, tracked as CVE-2026-35616, allows for pre-authentication API access bypass and privilege escalation, posing a significant threat to endpoint security.
Hackers Exploit TrueConf Flaw to Deploy Malicious Updates
Imagine the video conferencing platform you rely on to connect with your team being turned against you, allowing hackers to spread malicious software to everyone in the room. A recently discovered zero-day flaw in TrueConf's update mechanism has been exploited by threat actors to deliver and execute malicious files on connected devices.
ThreatsDay Bulletin: Exclusive Critical Privacy Alert
This ThreatsDay Bulletin exposes how routine vulnerabilities — from invasive camera malware to flawed archival tools — are being combined into faster, stealthier, and deeply personal attacks. Learn why a missed patch or forgotten camera permission can open the door to surveillance and what to do before it’s too late.
Endpoint Security: Exclusive 2025 Lessons, Best 2026 Moves
Endpoint Security got personal in 2025: attackers used smartphones, tablets and unmanaged devices as easy backdoors while AI supercharged phishing and exploit automation. This post distills the must-know lessons for federal IT—clear steps to inventory devices, prioritize patches, and build layered defenses heading into 2026.
CrowdStrike Stunning SGNL Deal Offers Best Identity Shield
CrowdStrike’s $740M acquisition of SGNL flips identity security from login to continuous authorization—pairing SGNL’s real‑time identity signals with CrowdStrike’s telemetry to fix identity hygiene and curb misuse by service accounts, machine IDs and AI agents. It’s a decisive bet that identity, not just authentication, is the new frontline of cyber defense.
PlushDaemon Exclusive: Dangerous New Spy Malware
Exclusive: PlushDaemon malware is a stealthy new spy quietly siphoning personal data — learn how it works, whos at risk, and easy steps you can take to protect yourself.
Microsoft Fixes Kernel Zero Day: Stunning Critical Patch
Microsoft just patched an actively exploited Windows kernel zero‑day — a high‑stakes reminder that prompt patching can be the difference between a quiet night and a full system compromise. If you manage systems, prioritize this Patch Tuesday update now to protect identity, servers, and other critical endpoints.
Hackers Weaponize Windows Hyper-V in Stunning EDR Evasion
Think your EDR has you covered? Attackers are enabling Windows Hyper-V on compromised machines and spinning up tiny Alpine Linux VMs to run malware out of sight of host-based sensors—making virtualization the new stealth tactic defenders must watch for.
macOS Must-Have Security Stops Admin Errors Effortlessly
Stop administrative mistakes before they become breaches: a must-have macOS safeguard quietly blocks accidental mic/camera permissions, insecure SMB v1 shares, and other everyday missteps attackers exploit. Keep the convenience you need without handing adversaries an open door.
modular macOS backdoor: Stunning Dangerous Threat Revealed
What if your Mac had been quietly harboring a stealthy backdoor for years? Researchers say ChillyHell—a modular macOS implant—evaded Apple’s protections for up to four years, showing how dormancy and clever design let attackers hide in plain sight.
zero-day vulnerability in WinRAR: Stunning Risk Exposed
A newly discovered WinRAR zero-day lets attackers sneak executables into Windows locations that are normally off-limits, turning an innocent archive into a potential backdoor. Update WinRAR and avoid opening unsolicited RARs until patches are applied.
Trend Micro vulnerability: Risky, Stunning Security Failure
Trend Micro’s Apex One management console has a critical, actively exploited vulnerability with no patch available, leaving organizations exposed and customer trust at risk. It’s a wake-up call for greater transparency, faster fixes, and heightened vigilance from both vendors and users.