Weekly Security Roundup: Critical CVEs, Linux DDoS Botnet, Device-Code Phishing, and Android Spyware

The week saw multiple security incidents ranging from simple but effective social engineering attacks—fake support calls, compromised browser extensions,…

Strengthen physical access controls by enforcing passwords on all devices. Audit browser extensions and review multifactor authentication policies. Deploy ongoing security awareness training focused on social engineering and fake support calls. Monitor systems for anomalous behavior and set alerts for unauthorized software downloads.