Security news aggregator

Latest coverage for Endpoint Security

Endpoint security protects laptops, phones, servers, and other connected devices from malware, unauthorized access, and breaches.

4 headlines in this view

Refine the feed

Search across headline titles and summaries.

Tag briefing

Background for this topic.

Endpoint security protects laptops, desktops, servers, mobile devices, and other systems that connect to an organization’s networks or services. It combines secure configuration, timely patching, encryption, access controls, application restrictions, and monitoring. Endpoint detection and response (EDR) tools record activity such as process execution, persistence, and configuration changes so analysts can investigate suspicious behavior.

Endpoints are common entry points for exploiting vulnerable software, stealing credentials, or installing unauthorized code. Effective programs maintain an accurate device and software inventory, prioritize vulnerabilities that are exposed or actively exploited, and apply least privilege to limit what a compromised device or account can do. They also need tested procedures to contain or isolate devices, investigate them without unnecessarily destroying evidence, and govern endpoint telemetry and administrator access to protect privacy and support applicable data-handling obligations.

Showing 4 most recent headlines Filtered view
The Hacker News 2 years, 11 months ago

MDR: Empowering Organizations with Enhanced Security

Managed Detection and Response (MDR) has emerged as a crucial solution for organizations looking to bolster their security measures. MDR allows businesses to outsource the management of Endpoint Detection and Response (EDR) products deployed across their network domain. With real-time threat-hunting capabilities, MDR services detect and mitigate malicious activities on individual endpoints while

The Hacker News 5 Aug 2023, 8:03 p.m. EDR Endpoint Security Enhancement

Cybersecurity researchers have discovered a bypass for a recently fixed actively exploited vulnerability in some versions of Ivanti Endpoint Manager Mobile (EPMM), prompting Ivanti to urge users to update to the latest version of the software

The Hacker News 3 Aug 2023, 4:06 p.m. API Artificial Intelligence Bypass CVE Endpoint Security Fixed Mobile Patch Research Unauthenticated Vulnerability

Cybersecurity researchers have discovered a new post-exploitation technique in Amazon Web Services (AWS) that allows the AWS Systems Manager Agent (SSM Agent) to be run as a remote access trojan on Windows and Linux environments "The SSM agent, a legitimate tool used by admins to manage their instances, can be re-purposed by an attacker who has achieved high privilege access on an endpoint with

The Hacker News 2 Aug 2023, 11:50 p.m. Amazon (company) Amazon Web Services Endpoint Security Linux Microsoft Remote Access Trojan Research Trojan

Advanced persistent threat (APT) actors exploited a recently disclosed critical flaw impacting Ivanti Endpoint Manager Mobile (EPMM) as a zero-day since at least April 2023 in attacks directed against Norwegian entities, including a government network

The Hacker News 2 Aug 2023, 3:41 p.m. 0-Day Advanced Persistent Threat CISA Critical Vulnerability Disclosure Endpoint Security Flaw Government Mobile Norway Vulnerability