Cisco - Security Ticks

Too many Cisco ASA firewalls still unsecure despite zero-day attack alerts

0-day, Cisco, Don't miss, firewall, Government, government-backed attacks, GreyNoise, Hot stuff, News, Shadowserver / SecurityTicks

Too many Cisco ASA firewalls still unsecure despite zero-day attack alerts 2025-10-01 at 13:36 By Zeljka Zorz Despite Cisco and various cybersecurity agencies warning about attackers actively exploting zero-day vulnerabilities (CVE-2025-20333 and CVE-2025-20362) in Cisco Adaptive Security Appliances (ASA) for months, there are still around 48,000 vulnerable appliances out there. The number is provided by […]

React to this headline:

Too many Cisco ASA firewalls still unsecure despite zero-day attack alerts Read More »

Top 10 fastest growing ICT jobs

agentic AI, Artificial Intelligence, Cisco, News, report, skill development / SecurityTicks

Top 10 fastest growing ICT jobs 2025-09-29 at 08:04 By Anamarija Pogorelec AI is reshaping the workforce in ways that security leaders cannot ignore. The AI Workforce Consortium’s new report, ICT in Motion: The Next Wave of AI Integration, provides a look at how AI is changing job roles and skills across G7 economies. The

React to this headline:

Top 10 fastest growing ICT jobs Read More »

Cisco ASA zero-day vulnerabilities exploited in sophisticated attacks

0-day, backdoor, CISA, Cisco, Don't miss, firewall, Government, government-backed attacks, Hot stuff, malware analysis, NCSC, News / SecurityTicks

Cisco ASA zero-day vulnerabilities exploited in sophisticated attacks 2025-09-26 at 14:19 By Zeljka Zorz A widespread campaign aimed at breaching organizations via zero-day vulnerabilities in Cisco Adaptive Security Appliances (ASA) has been revealed by the US, UK, Canadian and Australian cybersecurity agencies. The suspected state-sponsored threat actor behind it is believed to be the one

React to this headline:

Cisco ASA zero-day vulnerabilities exploited in sophisticated attacks Read More »

Cisco Firewall Zero-Days Exploited in China-Linked ArcaneDoor Attacks

ArcaneDoor, China, Cisco, exploited, Featured, firewall, Vulnerabilities, Zero-Day / SecurityTicks

Cisco Firewall Zero-Days Exploited in China-Linked ArcaneDoor Attacks 2025-09-26 at 10:20 By Ionut Arghire Leading to remote code execution and privilege escalation, the flaws were exploited on Cisco ASA 5500-X series devices that lack secure boot. The post Cisco Firewall Zero-Days Exploited in China-Linked ArcaneDoor Attacks appeared first on SecurityWeek. This article is an excerpt

React to this headline:

Cisco Firewall Zero-Days Exploited in China-Linked ArcaneDoor Attacks Read More »

Cisco fixes IOS/IOS XE zero-day exploited by attackers (CVE-2025-20352)

0-day, Cisco, Don't miss, enterprise, Hot stuff, News, security update, SMBs / SecurityTicks

Cisco fixes IOS/IOS XE zero-day exploited by attackers (CVE-2025-20352) 2025-09-25 at 15:33 By Zeljka Zorz Cisco has fixed 14 vulnerabilities in IOS and IOS XE software, among them CVE-2025-20352, a high-severity vulnerability that has been exploited in zero-day attacks. About CVE-2025-20352 Cisco IOS software can be found on older models of Cisco Catalyst switches, Integrated

React to this headline:

Cisco fixes IOS/IOS XE zero-day exploited by attackers (CVE-2025-20352) Read More »

Cisco Patches Zero-Day Flaw Affecting Routers and Switches

Cisco, exploited, Featured, Network Security, router, Switch, Vulnerabilities, Zero-Day / SecurityTicks

Cisco Patches Zero-Day Flaw Affecting Routers and Switches 2025-09-25 at 11:46 By Ionut Arghire The security defect allows remote attackers with administrative privileges to execute arbitrary code as the root user. The post Cisco Patches Zero-Day Flaw Affecting Routers and Switches appeared first on SecurityWeek. This article is an excerpt from SecurityWeek View Original Source

React to this headline:

Cisco Patches Zero-Day Flaw Affecting Routers and Switches Read More »

Cisco Patches High-Severity IOS XR Vulnerabilities

Cisco, Vulnerabilities / SecurityTicks

Cisco Patches High-Severity IOS XR Vulnerabilities 2025-09-11 at 17:37 By Ionut Arghire High-severity flaws in IOS XR could lead to ISO image verification bypass and denial-of-service conditions. The post Cisco Patches High-Severity IOS XR Vulnerabilities appeared first on SecurityWeek. This article is an excerpt from SecurityWeek View Original Source React to this headline:

React to this headline:

Cisco Patches High-Severity IOS XR Vulnerabilities Read More »

Cisco puts agentic AI at the core of Splunk Enterprise Security

Cisco, Industry news / SecurityTicks

Cisco puts agentic AI at the core of Splunk Enterprise Security 2025-09-09 at 16:51 By Industry News Cisco introduced Splunk Enterprise Security Essentials Edition and Splunk Enterprise Security Premier Edition, providing customers two agentic AI-powered SecOps options that unify security workflows across threat detection, investigation, and response (TDIR). Delivered within Splunk Enterprise Security 8.2, these

React to this headline:

Cisco puts agentic AI at the core of Splunk Enterprise Security Read More »

Complexity and AI put identity protection to the test

Cisco, cyber risk, cybersecurity, Duo Security, News, report, survey / SecurityTicks

Complexity and AI put identity protection to the test 2025-09-02 at 08:06 By Anamarija Pogorelec Identity has become a core pillar of cybersecurity strategy. Remote work, cloud-first adoption, and distributed supply chains have moved identity from “a tactical IT consideration to a strategic pillar of cybersecurity,” according to Cisco Duo’s 2025 State of Identity Security

React to this headline:

Complexity and AI put identity protection to the test Read More »

Russian threat actors using old Cisco bug to target critical infrastructure orgs

Cisco, critical infrastructure, cyber espionage, Don't miss, FBI, Hot stuff, News, Russian Federation, USA, vulnerability / SecurityTicks

Russian threat actors using old Cisco bug to target critical infrastructure orgs 2025-08-21 at 18:07 By Zeljka Zorz A threat group linked to the Russian Federal Security Service’s (FSB) Center 16 unit has been compromising unpatched and end-of-life Cisco networking devices via an old vulnerability (CVE-2018-0171), the FBI and Cisco warned on Wednesday. “Primary targets

React to this headline:

Russian threat actors using old Cisco bug to target critical infrastructure orgs Read More »

Russian APT Exploiting 7-Year-Old Cisco Vulnerability: FBI

APT, Cisco, Dragonfly, exploited, Nation-State, Russia, Static Tundra / SecurityTicks

Russian APT Exploiting 7-Year-Old Cisco Vulnerability: FBI 2025-08-21 at 14:16 By Ionut Arghire Russian state-sponsored hackers tracked as Static Tundra continue to target Cisco devices affected by CVE-2018-0171. The post Russian APT Exploiting 7-Year-Old Cisco Vulnerability: FBI appeared first on SecurityWeek. This article is an excerpt from SecurityWeek View Original Source React to this headline:

React to this headline:

Russian APT Exploiting 7-Year-Old Cisco Vulnerability: FBI Read More »

Cisco Patches Critical Vulnerability in Firewall Management Platform

Cisco, patch, Vulnerabilities, vulnerability / SecurityTicks

Cisco Patches Critical Vulnerability in Firewall Management Platform 2025-08-15 at 10:48 By Eduard Kovacs Cisco has released over 20 advisories as part of its August 2025 bundled publication for ASA, FMC and FTD products. The post Cisco Patches Critical Vulnerability in Firewall Management Platform appeared first on SecurityWeek. This article is an excerpt from SecurityWeek

React to this headline:

Cisco Patches Critical Vulnerability in Firewall Management Platform Read More »

Millions of Dell laptops could be persistently backdoored in ReVault attacks

Broadcom, Cisco, Dell, Don't miss, Endpoint Security, firmware, hardware, Hot stuff, News, vulnerability / SecurityTicks

Millions of Dell laptops could be persistently backdoored in ReVault attacks 2025-08-05 at 21:19 By Zeljka Zorz A set of firmware vulnerabilities affecting 100+ Dell laptop models widely used in government settings and by the cybersecurity industry could allow attackers to achieve persistent access even across Windows reinstalls, Cisco Talos researchers have discovered. About the

React to this headline:

Millions of Dell laptops could be persistently backdoored in ReVault attacks Read More »

Cisco Says User Data Stolen in CRM Hack

Cisco, CRM, data breach, Data Breaches / SecurityTicks

Cisco Says User Data Stolen in CRM Hack 2025-08-05 at 17:19 By Eduard Kovacs Cisco has disclosed a data breach affecting Cisco.com user accounts, including names, email address, and phone numbers. The post Cisco Says User Data Stolen in CRM Hack appeared first on SecurityWeek. This article is an excerpt from SecurityWeek View Original Source

React to this headline:

Cisco Says User Data Stolen in CRM Hack Read More »

Maximum severity Cisco ISE vulnerabilities exploited by attackers

access control, Cisco, Don't miss, Hot stuff, identity services, News, vulnerability / SecurityTicks

Maximum severity Cisco ISE vulnerabilities exploited by attackers 2025-07-23 at 16:20 By Zeljka Zorz One or more vulnerabilities affecting Cisco Identity Services Engine (ISE) are being exploited in the wild, Cisco has confirmed by updating the security advisory for the flaws. About the vulnerabilities The three vulnerabilities affect Cisco’s Identity Services Engine (ISE) – a

React to this headline:

Maximum severity Cisco ISE vulnerabilities exploited by attackers Read More »

Hackers Start Exploiting Critical Cisco ISE Vulnerabilities

Cisco, Cisco ISE, exploited, Vulnerabilities, vulnerability / SecurityTicks

Hackers Start Exploiting Critical Cisco ISE Vulnerabilities 2025-07-23 at 12:27 By Ionut Arghire Cisco says it is aware of attempted exploitation of critical ISE vulnerabilities leading to unauthenticated remote code execution. The post Hackers Start Exploiting Critical Cisco ISE Vulnerabilities appeared first on SecurityWeek. This article is an excerpt from SecurityWeek View Original Source React

React to this headline:

Hackers Start Exploiting Critical Cisco ISE Vulnerabilities Read More »

Cisco Patches Another Critical ISE Vulnerability

Cisco, patch, Vulnerabilities, vulnerability / SecurityTicks

Cisco Patches Another Critical ISE Vulnerability 2025-07-17 at 12:32 By Ionut Arghire Cisco has released patches for multiple vulnerabilities, including a critical flaw in Cisco ISE that leads to remote code execution (RCE). The post Cisco Patches Another Critical ISE Vulnerability appeared first on SecurityWeek. This article is an excerpt from SecurityWeek View Original Source

React to this headline:

Cisco Patches Another Critical ISE Vulnerability Read More »

Cisco Warns of Hardcoded Credentials in Enterprise Software

Cisco, CVE-2025-20309, Network Security, Vulnerabilities / SecurityTicks

Cisco Warns of Hardcoded Credentials in Enterprise Software 2025-07-03 at 14:32 By Ionut Arghire Hardcoded SSH credentials in Cisco Unified CM and Unified CM SME could allow attackers to execute commands as root. The post Cisco Warns of Hardcoded Credentials in Enterprise Software appeared first on SecurityWeek. This article is an excerpt from SecurityWeek View

React to this headline:

Cisco Warns of Hardcoded Credentials in Enterprise Software Read More »

Cisco fixes maximum-severity flaw in enterprise unified comms platform (CVE-2025-20309)

Cisco, communication, Don't miss, enterprise, Hot stuff, News, SMBs, vulnerability / SecurityTicks

Cisco fixes maximum-severity flaw in enterprise unified comms platform (CVE-2025-20309) 2025-07-03 at 14:19 By Zeljka Zorz Cisco has found a backdoor account in yet another of its software solutions: CVE-2025-20309, stemming from default credentials for the root account, could allow unauthenticated remote attackers to log into a vulnerable Cisco Unified Communications Manager (Unified CM) and

React to this headline:

Cisco fixes maximum-severity flaw in enterprise unified comms platform (CVE-2025-20309) Read More »

Critical Cisco ISE Vulnerabilities Allow Remote Code Execution

Cisco, patch, Vulnerabilities, vulnerability / SecurityTicks

Critical Cisco ISE Vulnerabilities Allow Remote Code Execution 2025-06-26 at 12:02 By Ionut Arghire Two critical vulnerabilities in Cisco ISE could allow remote attackers to execute arbitrary code with root privileges. The post Critical Cisco ISE Vulnerabilities Allow Remote Code Execution appeared first on SecurityWeek. This article is an excerpt from SecurityWeek View Original Source

React to this headline:

Critical Cisco ISE Vulnerabilities Allow Remote Code Execution Read More »