Cisco Warns of Critical, Exploited Catalyst SD-WAN Manager Flaw
Cisco "strongly recommends" customers apply a patch for a critical API authentication bypass that's being exploited.
All topics
Cisco "strongly recommends" customers apply a patch for a critical API authentication bypass that's being exploited.
This case is yet another reminder just how important vendor communication is in such incidents and how much uncertainty can hamper security.
On Saturday, researchers from watchTowr Labs said they had credible information that attackers were exploiting an unknown RCE vulnerability in Citrix NetScaler boxes.
This vulnerability allows for unauthenticated remote code execution and shows how a missing bounds check—a classic programming error.
Cisco Talos researchers identified ClosedQuorum, a Windows implant that uses multiple LLMs to autonomously select attack actions. The catch: there's no confirmation that it’s actually been deployed in the wild.
Attackers impersonated LastPass Authenticator on fake GitHub pages to deliver the Rapuncel infostealer in a campaign involving 40 fake brands.