Cisco - Security Ticks

“Disappearing” implants, followed by first fixes for exploited Cisco IOS XE zero-day

0-day, attack, backdoor, Cisco, Don't miss, Hot stuff, News, Orange Cyberdefense, security update / SecurityTicks

“Disappearing” implants, followed by first fixes for exploited Cisco IOS XE zero-day 23/10/2023 at 13:04 By Zeljka Zorz Cisco has released the first fixes for the IOS XE zero-day (CVE-2023-20198) exploited by attackers to ultimately deliver a malicious implant. The fixes were made available on Sunday, but a curious thing happened the day before: several […]

React to this headline:

“Disappearing” implants, followed by first fixes for exploited Cisco IOS XE zero-day Read More »

Cisco Devices Compromised through IOS XE Zero-Day Vulnerability (CVE-2023-20198)

Cisco, Cisco IOS XE, CVE-2021-1435, CVE-2023-20198, vulnerability, Zero Day Vulnerability, Zero-Day / SecurityTicks

Cisco Devices Compromised through IOS XE Zero-Day Vulnerability (CVE-2023-20198) 19/10/2023 at 16:02 By cybleinc Cyble Global Sensor Intelligence (CGSI) Networks observes the active exploitation of the Cisco IOS XE Zero-Day Vulnerability. The post Cisco Devices Compromised through IOS XE Zero-Day Vulnerability (CVE-2023-20198) appeared first on Cyble. This article is an excerpt from Cyble View Original

React to this headline:

Cisco Devices Compromised through IOS XE Zero-Day Vulnerability (CVE-2023-20198) Read More »

Number of Cisco Devices Hacked via Unpatched Vulnerability Increases to 40,000

Cisco, exploited, Malware & Threats, Vulnerabilities / SecurityTicks

Number of Cisco Devices Hacked via Unpatched Vulnerability Increases to 40,000 19/10/2023 at 14:01 By Eduard Kovacs The number of Cisco devices hacked via the CVE-2023-20198 zero-day has reached 40,000, including many in the US. The post Number of Cisco Devices Hacked via Unpatched Vulnerability Increases to 40,000 appeared first on SecurityWeek. This article is

React to this headline:

Number of Cisco Devices Hacked via Unpatched Vulnerability Increases to 40,000 Read More »

Tens of Thousands of Cisco Devices Hacked via Zero-Day Vulnerability

Cisco, Featured, Malware & Threats, Zero-Day / SecurityTicks

Tens of Thousands of Cisco Devices Hacked via Zero-Day Vulnerability 18/10/2023 at 14:01 By Eduard Kovacs Tens of thousands of Cisco devices have reportedly been hacked via the exploitation of the zero-day vulnerability CVE-2023-20198. The post Tens of Thousands of Cisco Devices Hacked via Zero-Day Vulnerability appeared first on SecurityWeek. This article is an excerpt

React to this headline:

Tens of Thousands of Cisco Devices Hacked via Zero-Day Vulnerability Read More »

Cisco Devices Hacked via IOS XE Zero-Day Vulnerability

Cisco, exploited, Featured, Vulnerabilities, Zero-Day / SecurityTicks

Cisco Devices Hacked via IOS XE Zero-Day Vulnerability 17/10/2023 at 14:16 By Eduard Kovacs Cisco is warning customers that a new IOS XE zero-day vulnerability tracked as CVE-2023-20198 is being exploited to hack devices. The post Cisco Devices Hacked via IOS XE Zero-Day Vulnerability appeared first on SecurityWeek. This article is an excerpt from SecurityWeek

React to this headline:

Cisco Devices Hacked via IOS XE Zero-Day Vulnerability Read More »

Cisco IOS XE zero-day exploited by attackers to deliver implant (CVE-2023-20198)

0-day, attack, Cisco, Don't miss, Hot stuff, News / SecurityTicks

Cisco IOS XE zero-day exploited by attackers to deliver implant (CVE-2023-20198) 16/10/2023 at 22:33 By Zeljka Zorz A previously unknown vulnerability (CVE-2023-20198) affecting networking devices running Cisco IOS XE software is being exploited by a threat actor to take control of the devices and install an implant, Cisco Talos researchers have warned today. About CVE-2023-20198

React to this headline:

Cisco IOS XE zero-day exploited by attackers to deliver implant (CVE-2023-20198) Read More »

Cisco Plugs Gaping Hole in Emergency Responder Software

Cisco, Cisco Emergency Responder, cloud security, CVSS 9.8, disaster recovery, Incident Response, Vulnerabilities / SecurityTicks

Cisco Plugs Gaping Hole in Emergency Responder Software 05/10/2023 at 21:31 By Ryan Naraine Cisco warns that unauthenticated, remote attackers can log into devices using root account, which has default, static credentials that cannot be changed or deleted. The post Cisco Plugs Gaping Hole in Emergency Responder Software appeared first on SecurityWeek. This article is

React to this headline:

Cisco Plugs Gaping Hole in Emergency Responder Software Read More »

Cybertech Europe 2023 video walkthrough

Accenture, Armis, Atlantica, Cisco, Cloudflare, Cyber Guru, CyberArk, Cybergym, Cybertech Europe 2023, Cybertech Global, DGS, Don't miss, Forcepoint, Hot stuff, IBM Security, KnowBe4, Lutech, ManageEngine, Netgroup, Palo Alto Networks, Qualys, Recorded Future, SentinelOne, Sysdig, Trend Micro, Video, XM Cyber, Zscaler / SecurityTicks

Cybertech Europe 2023 video walkthrough 04/10/2023 at 12:31 By Help Net Security In this Help Net Security video, we take you inside Cybertech Europe 2023 at La Nuvola Convention Center in Rome. The video features the following vendors: Accenture, Armis, Atlantica, Cisco, Cloudflare, CyberArk, Cyber Guru, Cybergym, DGS, Forcepoint, IBM Security, KnowBe4, Lutech, ManageEngine, Netgroup,

React to this headline:

Cybertech Europe 2023 video walkthrough Read More »

Infosec products of the month: September 2023

1Password, AlphaSOC, Armis, Baffle, Ciphertex Data Security, Cisco, ComplyCube, CTERA, CyberSaint, Dig, Fortinet, Ghost Security, Hornetsecurity, Immersive Labs, Kingston Digital, Laiyer.ai, MixMode, News, NTT Security, OneTrust, Panzura, Purism, runZero, SeeMetrics, Swissbit, TXOne Networks, Viavi Solutions, Wing Security / SecurityTicks

Infosec products of the month: September 2023 02/10/2023 at 05:32 By Help Net Security Here’s a look at the most interesting products from the past month, featuring releases from: 1Password, Armis, AlphaSOC, Baffle, Ciphertex Data Security, Cisco, ComplyCube, CTERA, CyberSaint, Dig Security, Fortinet, Ghost Security, Hornetsecurity, Immersive Labs, Kingston, Laiyer.ai, MixMode, NTT Security Holdings, OneTrust,

React to this headline:

Infosec products of the month: September 2023 Read More »

Cisco Warns of IOS Software Zero-Day Exploitation Attempts

Cisco, exploited, Featured, Vulnerabilities, Zero-Day / SecurityTicks

Cisco Warns of IOS Software Zero-Day Exploitation Attempts 28/09/2023 at 15:32 By Ionut Arghire Cisco has released patches for vulnerability in the GET VPN feature of IOS and IOS XE software that has been exploited in attacks. The post Cisco Warns of IOS Software Zero-Day Exploitation Attempts appeared first on SecurityWeek. This article is an

React to this headline:

Cisco Warns of IOS Software Zero-Day Exploitation Attempts Read More »

Journey partners with Webex by Cisco to enhance security for customer interactions

Cisco, Industry news, Journey, Webex / SecurityTicks

Journey partners with Webex by Cisco to enhance security for customer interactions 28/09/2023 at 12:02 By Industry News Journey announced its partnership with Webex by Cisco to streamline customer experience and enhance security for businesses that utilize Webex Contact Center. Journey’s integrated identify platform is now available to all Webex Contact Center customers on the

React to this headline:

Journey partners with Webex by Cisco to enhance security for customer interactions Read More »

Chinese Gov Hackers Caught Hiding in Cisco Router Firmware

Cisco, firmware, Malware & Threats, MoonBounce, Nation-State, routers, Security Infrastructure / SecurityTicks

Chinese Gov Hackers Caught Hiding in Cisco Router Firmware 27/09/2023 at 21:02 By Ryan Naraine The NSA and FBI warn that a Chinese state-sponsored APT called BlackTech is hacking into network edge devices and using firmware implants to silently hop around the corporate networks of U.S. and Japanese companies. The post Chinese Gov Hackers Caught

React to this headline:

Chinese Gov Hackers Caught Hiding in Cisco Router Firmware Read More »

Cisco to Acquire Splunk for $28 Billion

Cisco, Featured, Funding/M&A, M&A, Splunk / SecurityTicks

Cisco to Acquire Splunk for $28 Billion 21/09/2023 at 20:01 By Eduard Kovacs Cisco will boost its cybersecurity capabilities by shelling out $28 billion to buy Splunk, which Cisco says will drive the next generation of AI-enabled security and observability. The post Cisco to Acquire Splunk for $28 Billion appeared first on SecurityWeek. This article

React to this headline:

Cisco to Acquire Splunk for $28 Billion Read More »

Cisco to acquire Splunk in deal valued at $28 billion

Cisco, Industry news, Splunk / SecurityTicks

Cisco to acquire Splunk in deal valued at $28 billion 21/09/2023 at 16:16 By Industry News Cisco and Splunk announced a definitive agreement under which Cisco intends to acquire Splunk for $157 per share in cash, representing approximately $28 billion in equity value. Upon close of the acquisition, Splunk President and CEO Gary Steele will

React to this headline:

Cisco to acquire Splunk in deal valued at $28 billion Read More »

Telecom firms hit with novel backdoors disguised as security software

Cisco, Don't miss, Hot stuff, Malware, News, telecommunications / SecurityTicks

Telecom firms hit with novel backdoors disguised as security software 21/09/2023 at 15:31 By Zeljka Zorz Researchers have unearthed new backdoors leveraged to maintain long-term access in the networks of telecom firms in the Middle East. HTTPSnoop and PipeSnoop – as the two implants have been dubbed by Cisco Talos researchers – have been disguised

React to this headline:

Telecom firms hit with novel backdoors disguised as security software Read More »

New infosec products of the week: September 15, 2023

Armis, Cisco, CTERA, Kingston Digital, News, Purism, Swissbit / SecurityTicks

New infosec products of the week: September 15, 2023 15/09/2023 at 08:02 By Help Net Security Here’s a look at the most interesting products from the past week, featuring releases from Armis, Cisco, CTERA, Kingston Digital, Purism, and Swissbit. Librem 11 tablet sets new standard for privacy and security with Linux-based PureOS Purism introduced the

React to this headline:

New infosec products of the week: September 15, 2023 Read More »

AuthMind Scores $8.5M Seed Funding for ITDR Tech

Ballistic Ventures, Cisco, cloud security, funding, Funding/M&A, Identity & Access, ITDR, Oort / SecurityTicks

AuthMind Scores $8.5M Seed Funding for ITDR Tech 13/09/2023 at 21:31 By Ryan Naraine Maryland startup scores $8.5 million in seed-stage funding to compete in the Identity Threat Detection and Response (ITDR) category. The post AuthMind Scores $8.5M Seed Funding for ITDR Tech appeared first on SecurityWeek. This article is an excerpt from SecurityWeek RSS

React to this headline:

AuthMind Scores $8.5M Seed Funding for ITDR Tech Read More »

Cisco Secure Application provides business risk insights for cloud native apps

Cisco, Industry news / SecurityTicks

Cisco Secure Application provides business risk insights for cloud native apps 13/09/2023 at 17:34 By Industry News Cisco has unveiled Cisco Secure Application (previously Security Insights for Cloud Native Application Observability) on the Cisco Full-Stack Observability Platform, enabling organizations to bring together application and security teams to securely develop and deploy applications. The latest release

React to this headline:

Cisco Secure Application provides business risk insights for cloud native apps Read More »

Cisco ASA Zero-Day Exploited in Akira Ransomware Attacks

Cisco, Featured, Malware & Threats, Vulnerabilities, Zero-Day / SecurityTicks

Cisco ASA Zero-Day Exploited in Akira Ransomware Attacks 08/09/2023 at 17:31 By Ionut Arghire Cisco is warning of a zero-day vulnerability in Cisco ASA and FTD that can be exploited remotely, without authentication, in brute force attacks. The post Cisco ASA Zero-Day Exploited in Akira Ransomware Attacks appeared first on SecurityWeek. This article is an

React to this headline:

Cisco ASA Zero-Day Exploited in Akira Ransomware Attacks Read More »

Unpatched Cisco ASA flaw exploited by attackers (CVE-2023-20269)

brute-force, Cisco, Don't miss, Hot stuff, News, Rapid7, vulnerability / SecurityTicks

Unpatched Cisco ASA flaw exploited by attackers (CVE-2023-20269) 08/09/2023 at 14:02 By Zeljka Zorz A vulnerability (CVE-2023-20269) in Cisco Adaptive Security Appliance (ASA) and Cisco Firepower Threat Defense (FTD) firewalls is being exploited by attackers to gain access to vulnerable internet-exposed devices. “This vulnerability was found during the resolution of a Cisco TAC support case,”

React to this headline:

Unpatched Cisco ASA flaw exploited by attackers (CVE-2023-20269) Read More »