article thumbnail

3CX Desktop App for Windows and macOS Reportedly Compromised in Supply Chain Attack

Tenable

In its alert, 3CX CEO Nick Galea confirmed that the "3CX DesktopApp has a malware in it" while only calling out the "Windows Electron client for customers running update 7." msi aa124a4b4df12b34e74ee7f6c683b2ebec4ce9a8edcf9be345823b4fdcf5d868 Windows 18.12.416 3cxdesktopapp-18.12.416.msi Has 3CX issued a response to these reports?

Windows 101
article thumbnail

Busting 5 Common Myths About Vulnerability Assessment

Tenable

Video conferencing and VoIP solutions that became must-haves for remote-operating organizations (as necessitated by the COVID-19 pandemic) were common attack vectors during 2020. Krebs, former director of the Cybersecurity and Infrastructure Security Agency, recently characterized ransomware as "the most visible, disruptive cyberthreat."

SMB 101
Insiders

Sign Up for our Newsletter

This site is protected by reCAPTCHA and the Google Privacy Policy and Terms of Service apply.

article thumbnail

IoT Security Concerns - How Secure Is the Hybrid Workforce?

Palo Alto Networks

This attack demonstrates how mixing corporate IT and IoT devices on the same network can allow malware to spread from vulnerable IoT devices to the corporate IT devices or vice-versa. Enforce Data-Driven Security Controls: Stop malware downloads, detect infected devices and block communication between infected devices and attackers.

IoT 68
article thumbnail

Hyper-segmentation – How to Avoid Cyber Disasters

CTOvision

After spinning off from Lucent Technologies and AT&T, Avaya became the experts in SIP, Internet telephony, unified communications and collaboration (UCC) and all thing VOIP. I spoke with Randy Cross, Senior Director of Fabrics & Infrastructure at Avaya. Avaya is the company that is synonymous with telephony.

How To 118
article thumbnail

InfoSec Policies and Standards: Some strategic context for those just diving into this world

CTOvision

This will increase the knowledge of how our infrastructure is structured, internal traffic flow, point of contact for different IT infrastructures, etc. How wireless infrastructure devices need to be configured. Ideally it should be the case that an analyst will research and write policies specific to the organization.

Policies 107