Researchers at Ivanti have identified two security vulnerabilities that are being exploited in its VPN appliances. The more severe of the two is being used in live attacks by multiple players, most likely led by Chinese espionage group UNC5221. The vulnerabilities are being used to deploy unknown malware and the company is urging customers to apply patches immediately.

New Triada comes preinstalled on Android devices
A new variant of the Triada Trojan has been discovered pre-installed on Android devices, enabling data theft from the moment the device is set up,