article thumbnail

3CX Desktop App for Windows and macOS Reportedly Compromised in Supply Chain Attack

Tenable

In its alert, 3CX CEO Nick Galea confirmed that the "3CX DesktopApp has a malware in it" while only calling out the "Windows Electron client for customers running update 7." Has 3CX issued a response to these reports? On March 30, 3CX published an official security alert on its forums.

Windows 101
article thumbnail

How to Ensure Supply Chain Security for AI Applications

Cloudera

Binaries are extremely hard to take apart once assembled, making them a great place to inadvertently or even overtly hide malware, as proven by Solarwinds , Kaseya , and 3CX. Unfortunately, these publicly available wheels have become an increasingly common way to obfuscate and distribute malware.

Insiders

Sign Up for our Newsletter

This site is protected by reCAPTCHA and the Google Privacy Policy and Terms of Service apply.

article thumbnail

Busting 5 Common Myths About Vulnerability Assessment

Tenable

Video conferencing and VoIP solutions that became must-haves for remote-operating organizations (as necessitated by the COVID-19 pandemic) were common attack vectors during 2020. When self-propagating malware enters any part of your system, it immediately begins searching for conduits through which it can spread to other systems.

SMB 101
article thumbnail

IoT Security Concerns - How Secure Is the Hybrid Workforce?

Palo Alto Networks

This attack demonstrates how mixing corporate IT and IoT devices on the same network can allow malware to spread from vulnerable IoT devices to the corporate IT devices or vice-versa. This is what inspired the development of Okyo Garde , designed with these evolving challenges in mind. Securing Work-from-Home Starts at Home.

IoT 65
article thumbnail

InfoSec Policies and Standards: Some strategic context for those just diving into this world

CTOvision

Organizations are giving more priority to development of information security policies, as protecting their assets is one of the prominent things that needs to be considered. Whenever information security policies are developed, a security analyst will copy the policies from another organization, with a few differences. By Albert Fruz.

Policies 107