Security News

The prolific China-linked nation-state actor known as APT41 has been linked to two previously undocumented strains of Android spyware called WyrmSpy and DragonEgg. "Known for its exploitation of web-facing applications and infiltration of traditional endpoint devices, an established threat actor like APT 41 including mobile in its arsenal of malware shows how mobile endpoints are high-value targets with coveted corporate and personal data," Lookout said in a report shared with The Hacker News.

McAfee unveiled two survey reports which reveal the level of disconnect that exists between generations over how safe mobile devices are and how vulnerable consumers are to threats on those devices. "The common thread linking these two research offerings are that consumers value protection of their data, privacy, and identity. As our use of mobile devices rapidly increases, we must remember that a mobile device is a connected device, just like a computer."

How to use DuckDuckGo on your PC and mobile devices. To install the DuckDuckGo extension, open Chrome or Firefox and browse to the DuckDuckGo home page.

The British government has launched a £2.6bn National Cyber Strategy, intended to steer the state's thinking on cyber attack, defence and technology for the next three years - and there's some good news if you run a tech company. Its authors praised the formation of the National Cyber Force "Offensive cyber activity" unit, a joint venture between spy agency MI6, domestic intel agency GCHQ and the Ministry of Defence.

Lithuania's National Cyber Security Centre has told its citizens to get rid of Xiaomi-made mobile devices amid fears that the Chinese company could remotely enable censorship tools. It has been established that during the initialisation of the system applications factory-installed on a Xiaomi Mi 10T device, these applications contact a server in Singapore at the address globalapi.

Aruba announced the availability of an embedded solution for mobile devices that delivers real-time visibility into roaming user experiences and application performance. Developed with Zebra Technologies, an innovator at the front line of business with solutions and partners that deliver a performance edge, the Aruba User Experience Insight AI software agent embedded in Zebra mobile computers analyzes real-time voice and data traffic and proactively flags issues that could affect application, Wi-Fi connectivity, roaming, and voice performance.

In emerging markets such as Brazil, Indonesia, South Africa and Thailand, 16 percent of mobile devices that processed a transaction were found to be infected with malware, according to Upstream. Insights come from Secure-D processing 1 billion mobile transactions and service sign-ups for 35 mobile operators in 23 emerging markets covering nearly 840 million users.

According to the Verizon Business Mobile Security Index 2021, the massive shift to remote work caused by the COVID-19 pandemic left many businesses knowingly vulnerable to attacks from employees' mobile devices. Of the more than 850 businesses surveyed for the report, 40% said mobile devices are their company's biggest IT security threat, yet 45% still sacrificed the security of mobile devices to enhance useability, meeting business needs or meeting project deadlines or productivity targets.

To secure information, it is critical to have an endpoint security strategy that reliably encompasses mobile devices and embraces all their aspects. Inevitably, when EDR is used to protect all endpoints in an indistinct manner, it creates a security gap at the mobile level.

Qualys announced it is expanding Qualys VMDR to mobile devices with support for Android and iOS/iPadOS delivering an end-to-end solution for mobile device security. Qualys' all-in-one VMDR provides in-depth mobile device visibility, data security insights, proactive posture monitoring, and automated response for all iOS and Android devices and installed apps - just like VMDR does for on premises, endpoints, clouds, containers, OT and IoT assets.