Cisco - Security Ticks

Cisco Duo Says Hack at Telephony Supplier Exposed MFA SMS Logs

2FA, Cisco, data breach, Data Breaches, Incident Response, MFA / SecurityTicks

Cisco Duo Says Hack at Telephony Supplier Exposed MFA SMS Logs 2024-04-15 at 22:31 By Ryan Naraine Cisco Duo warns that breach exposed phone numbers, phone carriers, metadata and other logs that could lead to downstream social engineering attacks. The post Cisco Duo Says Hack at Telephony Supplier Exposed MFA SMS Logs appeared first on […]

React to this headline:

Cisco Duo Says Hack at Telephony Supplier Exposed MFA SMS Logs Read More »

Cisco Warns of Vulnerability in Discontinued Small Business Routers

Cisco, CVE-2024-20362, KV Botnet, Network Security, routers, Vulnerabilities / SecurityTicks

Cisco Warns of Vulnerability in Discontinued Small Business Routers 2024-04-05 at 19:02 By Ionut Arghire Cisco says it will not release patches for a cross-site scripting vulnerability impacting end-of-life small business routers. The post Cisco Warns of Vulnerability in Discontinued Small Business Routers appeared first on SecurityWeek. This article is an excerpt from SecurityWeek RSS

React to this headline:

Cisco Warns of Vulnerability in Discontinued Small Business Routers Read More »

73% brace for cybersecurity impact on business in the next year or two

Cisco, cyber risk, cybersecurity, News, report, strategy, survey / SecurityTicks

73% brace for cybersecurity impact on business in the next year or two 2024-04-02 at 06:31 By Help Net Security Only 3% of organizations across the globe have the ‘mature’ level of readiness needed to be resilient against modern cybersecurity risks, according to Cisco. The 2024 Cisco Cybersecurity Readiness Index highlights that readiness is down

React to this headline:

73% brace for cybersecurity impact on business in the next year or two Read More »

Cisco Patches DoS Vulnerabilities in Networking Products

Cisco, Network Security, Vulnerabilities / SecurityTicks

Cisco Patches DoS Vulnerabilities in Networking Products 2024-03-28 at 15:17 By Ionut Arghire Cisco has released patches for multiple IOS and IOS XE software vulnerabilities leading to denial-of-service (DoS). The post Cisco Patches DoS Vulnerabilities in Networking Products appeared first on SecurityWeek. This article is an excerpt from SecurityWeek RSS Feed View Original Source React

React to this headline:

Cisco Patches DoS Vulnerabilities in Networking Products Read More »

Cisco Patches High-Severity IOS RX Vulnerabilities

Cisco, Vulnerabilities / SecurityTicks

Cisco Patches High-Severity IOS RX Vulnerabilities 2024-03-14 at 15:43 By Ionut Arghire Cisco releases patches for high-severity denial-of-service and elevation of privilege vulnerabilities in IOS RX software. The post Cisco Patches High-Severity IOS RX Vulnerabilities appeared first on SecurityWeek. This article is an excerpt from SecurityWeek RSS Feed View Original Source React to this headline:

React to this headline:

Cisco Patches High-Severity IOS RX Vulnerabilities Read More »

Tax-related scams escalate as filing deadline approaches

Cisco, Don't miss, fraud, Hot stuff, identity theft, IRS, Malwarebytes, News, scams, tax e-filing, trends, USA, Webroot / SecurityTicks

Tax-related scams escalate as filing deadline approaches 2024-03-12 at 07:18 By Helga Labus As the April 15, 2024 tax filing deadline approaches in the US, some old and some new tax-related scams targeting both taxpayers and tax professionals. Tax-related scams targeting taxpayers With taxpayers rushing to file their personal federal income tax return, scammers are

React to this headline:

Cisco patches Secure Client VPN flaw that could reveal authentication tokens (CVE-2024-20337)

access point, Cisco, Don't miss, enterprise, Hot stuff, News, security update, SMBs, VPN, vulnerability / SecurityTicks

Cisco patches Secure Client VPN flaw that could reveal authentication tokens (CVE-2024-20337) 2024-03-08 at 13:03 By Zeljka Zorz Cisco has fixed two high-severity vulnerabilities affecting its Cisco Secure Client enterprise VPN and endpoint security solution, one of which (CVE-2024-20337) could be exploited by unauthenticated, remote attackers to grab users’ valid SAML authentication token. “The attacker

React to this headline:

Cisco patches Secure Client VPN flaw that could reveal authentication tokens (CVE-2024-20337) Read More »

Cisco Patches High-Severity Vulnerabilities in VPN Product

Cisco, Vulnerabilities / SecurityTicks

Cisco Patches High-Severity Vulnerabilities in VPN Product 2024-03-07 at 16:40 By Ionut Arghire High-severity flaws in Cisco Secure Client could lead to code execution and unauthorized remote access VPN sessions. The post Cisco Patches High-Severity Vulnerabilities in VPN Product appeared first on SecurityWeek. This article is an excerpt from SecurityWeek RSS Feed View Original Source

React to this headline:

Cisco Patches High-Severity Vulnerabilities in VPN Product Read More »

Cisco Releases Open Source Backplane Traffic Visibility Tool for OT

Cisco, ICS, ICS/OT, Network Security, open source / SecurityTicks

Cisco Releases Open Source Backplane Traffic Visibility Tool for OT 2024-03-06 at 17:36 By Eduard Kovacs Cisco has released an open source PoC tool named Badgerboard designed for improved backplane network visibility for OT. The post Cisco Releases Open Source Backplane Traffic Visibility Tool for OT appeared first on SecurityWeek. This article is an excerpt

React to this headline:

Cisco Releases Open Source Backplane Traffic Visibility Tool for OT Read More »

Cisco Patches High-Severity Vulnerabilities in Data Center OS

Cisco, Vulnerabilities, vulnerability / SecurityTicks

Cisco Patches High-Severity Vulnerabilities in Data Center OS 2024-02-29 at 15:01 By Ionut Arghire Cisco’s semiannual FXOS and NX-OS security advisory bundle resolves two high- and two medium-severity vulnerabilities. The post Cisco Patches High-Severity Vulnerabilities in Data Center OS appeared first on SecurityWeek. This article is an excerpt from SecurityWeek RSS Feed View Original Source

React to this headline:

Cisco Patches High-Severity Vulnerabilities in Data Center OS Read More »

Infosec products of the month: February 2024

Appdome, BackBox, Center for Internet Security, Cisco, CompliancePro Solutions, Cyberhaven, LOKKER, ManageEngine, Metomic, News, OPSWAT, Pindrop, ProcessUnity, Qualys, SentinelOne, Sumsub, Truffle Security, Vade Secure, Varonis / SecurityTicks

Infosec products of the month: February 2024 2024-02-29 at 05:48 By Help Net Security Here’s a look at the most interesting products from the past month, featuring releases from: Appdome, BackBox, Center for Internet Security, Cisco, CompliancePro Solutions, Cyberhaven, LOKKER, ManageEngine, Metomic, OPSWAT, Pindrop, ProcessUnity, Qualys, SentinelOne, Sumsub,Truffle Security, Vade Secure, and Varonis. CIS ESS

React to this headline:

Infosec products of the month: February 2024 Read More »

CISA Urges Patching of Cisco ASA Flaw Exploited in Ransomware Attacks

CISA KEV, Cisco, exploited, Vulnerabilities / SecurityTicks

CISA Urges Patching of Cisco ASA Flaw Exploited in Ransomware Attacks 2024-02-16 at 14:02 By Eduard Kovacs CISA has added CVE-2020-3259, an old Cisco ASA vulnerability exploited by ransomware, to its KEV catalog. The post CISA Urges Patching of Cisco ASA Flaw Exploited in Ransomware Attacks appeared first on SecurityWeek. This article is an excerpt

React to this headline:

CISA Urges Patching of Cisco ASA Flaw Exploited in Ransomware Attacks Read More »

Cisco Announces It is Laying Off Thousands of Workers

Cisco, Management & Strategy / SecurityTicks

Cisco Announces It is Laying Off Thousands of Workers 2024-02-15 at 04:51 By AFP About 5 percent of Cisco’s global workforce will be affected by layoffs, the Silicon Valley-based company said. The post Cisco Announces It is Laying Off Thousands of Workers appeared first on SecurityWeek. This article is an excerpt from SecurityWeek RSS Feed

React to this headline:

Cisco Announces It is Laying Off Thousands of Workers Read More »

New infosec products of the week: February 9, 2024

Cisco, Metomic, News, OPSWAT, Qualys, Varonis / SecurityTicks

New infosec products of the week: February 9, 2024 2024-02-09 at 08:01 By Help Net Security Here’s a look at the most interesting products from the past week, featuring releases from Cisco, Metomic, OPSWAT, Qualys, and Varonis. Varonis MDDR helps organizations prevent data breaches Varonis introduced Varonis Managed Data Detection and Response (MDDR), a managed

React to this headline:

New infosec products of the week: February 9, 2024 Read More »

Cisco Patches Critical Vulnerabilities in Enterprise Communication Devices

Cisco, Vulnerabilities / SecurityTicks

Cisco Patches Critical Vulnerabilities in Enterprise Communication Devices 2024-02-08 at 16:01 By Ionut Arghire Two critical vulnerabilities in Cisco Expressway series devices can be exploited in CSRF attacks without authentication. The post Cisco Patches Critical Vulnerabilities in Enterprise Communication Devices appeared first on SecurityWeek. This article is an excerpt from SecurityWeek RSS Feed View Original

React to this headline:

Cisco Patches Critical Vulnerabilities in Enterprise Communication Devices Read More »

Akira, LockBit actively searching for vulnerable Cisco ASA devices

Cisco, Don't miss, enterprise, exploit, GreyNoise, Hot stuff, News, Ransomware, Truesec, vulnerability / SecurityTicks

Akira, LockBit actively searching for vulnerable Cisco ASA devices 2024-02-08 at 14:31 By Zeljka Zorz Akira and Lockbit ransomware groups are trying to breach Cisco ASA SSL VPN devices by exploiting several older vulnerabilities, security researcher Kevin Beaumont is warning. They are targeting vulnerabilities for which patches have been made available in 2020 and 2023.

React to this headline:

Akira, LockBit actively searching for vulnerable Cisco ASA devices Read More »

Cisco Motific reduces GenAI security, trust, and compliance risks

Cisco, Industry news / SecurityTicks

Cisco Motific reduces GenAI security, trust, and compliance risks 2024-02-06 at 16:33 By Industry News Cisco announced Motific, Cisco’s SaaS product that allows for trustworthy GenAI deployments in organizations. Born from Outshift, Cisco’s incubation business, Motific provides a central view across the entire GenAI journey, empowering central IT and security teams to rapidly deliver trustworthy

React to this headline:

Cisco Motific reduces GenAI security, trust, and compliance risks Read More »

Businesses banning or limiting use of GenAI over privacy risks

Artificial Intelligence, Cisco, CISO, Don't miss, generative AI, News, Privacy, report, survey / SecurityTicks

Businesses banning or limiting use of GenAI over privacy risks 2024-02-05 at 07:01 By Help Net Security Privacy is much more than a regulatory compliance matter. Findings from a new Cisco study highlight the growing Privacy concerns with GenAI, trust challenges facing organizations over their use of AI, and the attractive returns from privacy investment.

React to this headline:

Businesses banning or limiting use of GenAI over privacy risks Read More »

US Gov Disrupts SOHO Router Botnet Used by Chinese APT Volt Typhoon

Cisco, KV Botnet, Nation-State, Netgear, Network Security, Volt Typhoon / SecurityTicks

US Gov Disrupts SOHO Router Botnet Used by Chinese APT Volt Typhoon 2024-01-31 at 23:01 By Ryan Naraine The US government neutralizes a botnet full of end-of-life Cisco and Netgear routers being by a notorious Chinese APT group. The post US Gov Disrupts SOHO Router Botnet Used by Chinese APT Volt Typhoon appeared first on

React to this headline:

US Gov Disrupts SOHO Router Botnet Used by Chinese APT Volt Typhoon Read More »

Kyndryl and Cisco unveil two security edge services

Cisco, Industry news, Kyndryl / SecurityTicks

Kyndryl and Cisco unveil two security edge services 2024-01-25 at 16:31 By Industry News Kyndryl announced two new security edge services developed jointly with Cisco to help customers improve their security controls and proactively address and respond to cyber incidents. The new security edge services introduced by Kyndryl are: Kyndryl Consult Security Services Edge (SSE)

React to this headline:

Kyndryl and Cisco unveil two security edge services Read More »