Cisco - Security Ticks

Cisco Secure Application provides business risk insights for cloud native apps

Cisco Secure Application provides business risk insights for cloud native apps 13/09/2023 at 17:34 By Industry News Cisco has unveiled Cisco Secure Application (previously Security Insights for Cloud Native Application Observability) on the Cisco Full-Stack Observability Platform, enabling organizations to bring together application and security teams to securely develop and deploy applications. The latest release […]

React to this headline:

Cisco Secure Application provides business risk insights for cloud native apps Read More »

Cisco ASA Zero-Day Exploited in Akira Ransomware Attacks

Cisco, Featured, Malware & Threats, Vulnerabilities, Zero-Day / SecurityTicks

Cisco ASA Zero-Day Exploited in Akira Ransomware Attacks 08/09/2023 at 17:31 By Ionut Arghire Cisco is warning of a zero-day vulnerability in Cisco ASA and FTD that can be exploited remotely, without authentication, in brute force attacks. The post Cisco ASA Zero-Day Exploited in Akira Ransomware Attacks appeared first on SecurityWeek. This article is an

React to this headline:

Cisco ASA Zero-Day Exploited in Akira Ransomware Attacks Read More »

Unpatched Cisco ASA flaw exploited by attackers (CVE-2023-20269)

brute-force, Cisco, Don't miss, Hot stuff, News, Rapid7, vulnerability / SecurityTicks

Unpatched Cisco ASA flaw exploited by attackers (CVE-2023-20269) 08/09/2023 at 14:02 By Zeljka Zorz A vulnerability (CVE-2023-20269) in Cisco Adaptive Security Appliance (ASA) and Cisco Firepower Threat Defense (FTD) firewalls is being exploited by attackers to gain access to vulnerable internet-exposed devices. “This vulnerability was found during the resolution of a Cisco TAC support case,”

React to this headline:

Unpatched Cisco ASA flaw exploited by attackers (CVE-2023-20269) Read More »

Cisco Patches Critical Vulnerability in BroadWorks Platform

Cisco, Vulnerabilities / SecurityTicks

Cisco Patches Critical Vulnerability in BroadWorks Platform 07/09/2023 at 16:02 By Ionut Arghire Cisco has released patches for CVE-2023-20238, a critical authentication bypass vulnerability in the BroadWorks Application Delivery Platform. The post Cisco Patches Critical Vulnerability in BroadWorks Platform appeared first on SecurityWeek. This article is an excerpt from SecurityWeek RSS Feed View Original Source

React to this headline:

Cisco Patches Critical Vulnerability in BroadWorks Platform Read More »

Cisco VPNs with no MFA enabled hit by ransomware groups

Arctic Wolf Networks, brute-force, Cisco, Don't miss, enterprise, Hot stuff, MFA, News, Ransomware, Rapid7, SMBs, VPN / SecurityTicks

Cisco VPNs with no MFA enabled hit by ransomware groups 31/08/2023 at 14:46 By Zeljka Zorz Since March 2023 (and possibly even earlier), affiliates of the Akira and LockBit ransomware operators have been breaching organizations via Cisco ASA SSL VPN appliances. “In some cases, adversaries have conducted credential stuffing attacks that leveraged weak or default

React to this headline:

Cisco VPNs with no MFA enabled hit by ransomware groups Read More »

Cisco partners with Nutanix to accelerate hybrid multicloud deployments

Cisco, Industry news, Nutanix / SecurityTicks

Cisco partners with Nutanix to accelerate hybrid multicloud deployments 29/08/2023 at 14:04 By Industry News Cisco and Nutanix announced a global strategic partnership to accelerate hybrid multicloud deployments by offering complete hyperconverged solution for IT modernization and business transformation. IT organizations continue to face significant operational hurdles and urgent sustainability and security concerns as a

React to this headline:

Cisco partners with Nutanix to accelerate hybrid multicloud deployments Read More »

Kyndryl and Cisco expand partnership to help customers respond to cyber incidents

Cisco, Industry news, Kyndryl / SecurityTicks

Kyndryl and Cisco expand partnership to help customers respond to cyber incidents 25/08/2023 at 17:02 By Industry News Kyndryl has expanded technology partnership with Cisco to deliver services focused on cyber resilience. Through this partnership, Kyndryl will utilize Cisco’s comprehensive portfolio of network software, hardware and equipment with Kyndryl’s cyber resilience framework to help customers

React to this headline:

Kyndryl and Cisco expand partnership to help customers respond to cyber incidents Read More »

Lazarus Group exploited ManageEngine vulnerability to target critical infrastructure

Cisco, critical infrastructure, Don't miss, Europe, healthcare, Hot stuff, Malware, ManageEngine, News, North Korea, trojan, USA, vulnerability / SecurityTicks

Lazarus Group exploited ManageEngine vulnerability to target critical infrastructure 25/08/2023 at 15:36 By Helga Labus North Korean state-sponsored hackers Lazarus Group have been exploiting a ManageEngine ServiceDesk vulnerability (CVE-2022-47966) to target internet backbone infrastructure and healthcare institutions in Europe and the US. The group leveraged the vulnerability to deploy QuiteRAT, downloaded from an IP address

React to this headline:

Lazarus Group exploited ManageEngine vulnerability to target critical infrastructure Read More »

Cisco Patches Vulnerabilities Exposing Switches, Firewalls to DoS Attacks

Cisco, Vulnerabilities / SecurityTicks

Cisco Patches Vulnerabilities Exposing Switches, Firewalls to DoS Attacks 24/08/2023 at 18:31 By Ionut Arghire Cisco has released patches for three high-severity vulnerabilities in NX-OS and FXOS software that could lead to denial-of-service (DoS) conditions. The post Cisco Patches Vulnerabilities Exposing Switches, Firewalls to DoS Attacks appeared first on SecurityWeek. This article is an excerpt

React to this headline:

Cisco Patches Vulnerabilities Exposing Switches, Firewalls to DoS Attacks Read More »

Cisco Patches High-Severity Vulnerabilities in Enterprise Applications

Cisco, Vulnerabilities / SecurityTicks

Cisco Patches High-Severity Vulnerabilities in Enterprise Applications 17/08/2023 at 19:02 By Ionut Arghire Cisco has patched high-severity vulnerabilities in enterprise applications that could lead to privilege escalation, SQL injection, and denial-of-service. The post Cisco Patches High-Severity Vulnerabilities in Enterprise Applications appeared first on SecurityWeek. This article is an excerpt from SecurityWeek RSS Feed View Original

React to this headline:

Cisco Patches High-Severity Vulnerabilities in Enterprise Applications Read More »

Almost all VPNs are vulnerable to traffic-leaking TunnelCrack attacks

attack, Cisco, Cloudflare, Data leak, Don't miss, Hot stuff, Malwarebytes, Mozilla, News, NordVPN, Privacy, research, VPN, vulnerability / SecurityTicks

Almost all VPNs are vulnerable to traffic-leaking TunnelCrack attacks 14/08/2023 at 16:47 By Zeljka Zorz Several vulnerabilities that affect most VPN products out there can be exploited by attackers to read user traffic, steal user information, or even attack user devices, researchers have discovered. “Our attacks are not computationally expensive, meaning anyone with the appropriate

React to this headline:

Almost all VPNs are vulnerable to traffic-leaking TunnelCrack attacks Read More »

Black Hat USA 2023 video walkthrough

1Password, Aqua Security, Black Hat, Black Hat USA 2023, CISA, Cisco, conferences, CyberFOX, Darktrace, Dasera, Don't miss, Fortanix, Fortinet, Fortra, Hot stuff, HUMAN Security, Illumio, ManageEngine, Mimecast, NetSPI, Palo Alto Networks, Proofpoint, SentinelOne, Sophos, Tenable, Trellix, Uptycs, Video, VMWare, Wiz, Zimperium / SecurityTicks

Black Hat USA 2023 video walkthrough 11/08/2023 at 15:04 By Help Net Security Help Net Security is in Las Vegas this week for Black Hat USA 2023, and this video provides a closer look at the event. The exhibitors featured in this video are: 1Password, Aqua Security, CISA, Cisco, CyberFOX, Darktrace, Dasera, Fortanix, Fortinet, Fortra,

React to this headline:

Black Hat USA 2023 video walkthrough Read More »

Cisco adds automated ransomware recovery to its XDR solution

Cisco, Industry news / SecurityTicks

Cisco adds automated ransomware recovery to its XDR solution 01/08/2023 at 17:06 By Industry News Cisco is enhancing its Extended Detection and Response (XDR) solution. By adding recovery to the response process, Cisco XDR is redefining what customers should expect from security products. This announcement brings near real-time recovery for business operations after a ransomware

React to this headline:

Cisco adds automated ransomware recovery to its XDR solution Read More »

Converging networking and security with SASE

Cisco, Don't miss, Hot stuff, networking, SASE, strategy, tips, Video / SecurityTicks

Converging networking and security with SASE 25/07/2023 at 07:02 By Help Net Security While technology advancements and distributed workforces have created efficiencies and flexibility for companies, they’ve also created overcomplexity, which can increase security risk. 53% of senior IT decision-makers say their IT environment is more complex than it was two years ago. In this

React to this headline:

Converging networking and security with SASE Read More »

Cohesity expands collaboration with Cisco and HPE to improve data security for enterprises

Cisco, Cohesity, HPE, Industry news / SecurityTicks

Cohesity expands collaboration with Cisco and HPE to improve data security for enterprises 19/07/2023 at 14:02 By Industry News Cohesity announced Cisco and HPE will each be offering Cohesity Cloud Services (CCS) to bring efficient data security and management to companies operating in today’s modern hybrid and multicloud environments. Cohesity has benefited from strategic partnerships

React to this headline:

Cohesity expands collaboration with Cisco and HPE to improve data security for enterprises Read More »

Broadband consumers demand security and sustainability

Cisco, cybersecurity, digital transformation, hybrid workforce, News, survey / SecurityTicks

Broadband consumers demand security and sustainability 18/07/2023 at 07:01 By Help Net Security Consumer expectations will reshape the needs and economics of the internet, according to Cisco. People in EMEA are rethinking what they rely on the internet for, balancing classic demands for speed and reliability, with the intensifying needs of rising eco-consciousness, secure cloud

React to this headline:

Broadband consumers demand security and sustainability Read More »

Cisco Shopping Spree Adds Oort ID Threat Detection Tech

Acquisition, Cisco, cloud security, Funding/M&A, ITDR, M&A Tracker, Oort / SecurityTicks

Cisco Shopping Spree Adds Oort ID Threat Detection Tech 13/07/2023 at 19:31 By Ryan Naraine The planned Oort purchase is Cisco’s fourth acquisition of a cybersecurity company in the first half of 2023. The post Cisco Shopping Spree Adds Oort ID Threat Detection Tech appeared first on SecurityWeek. This article is an excerpt from SecurityWeek

React to this headline:

Cisco Shopping Spree Adds Oort ID Threat Detection Tech Read More »

Microsoft patches four exploited zero-days, but lags with fixes for a fifth (CVE-2023-36884)

0-day, BlackBerry, Cisco, cyber espionage, cybercrime, Don't miss, drivers, Google, Hot stuff, Microsoft, MS Office, News, Ransomware, rootkits, security update, Tenable, Trend Micro, Volexity, vulnerability, Windows / SecurityTicks

Microsoft patches four exploited zero-days, but lags with fixes for a fifth (CVE-2023-36884) 11/07/2023 at 22:31 By Zeljka Zorz For July 2023 Patch Tuesday, Microsoft has delivered 130 patches; among them are four for vulnerabilites actively exploited by attackers, but no patch for CVE-2023-36884, an Office and Windows HTML RCE vulnerability exploited in targeted attacks

React to this headline:

Microsoft patches four exploited zero-days, but lags with fixes for a fifth (CVE-2023-36884) Read More »

July 2023 Patch Tuesday forecast: A month of instability and uncertainty

Adobe, Adobe Acrobat, apple, Cisco, Don't miss, Expert analysis, Google, Hot stuff, Ivanti, Linux, Malwarebytes, Microsoft, Mozilla, News, Oracle, Patch Tuesday / SecurityTicks

July 2023 Patch Tuesday forecast: A month of instability and uncertainty 07/07/2023 at 12:17 By Help Net Security We’re halfway through 2023 already and moving into our seventh Patch Tuesday of the year next week. There’s been a lot of activity with Microsoft this month which may impact updates we’ll see. But first taking a

React to this headline:

July 2023 Patch Tuesday forecast: A month of instability and uncertainty Read More »

PoC exploit released for Cisco AnyConnect, Secure Client vulnerability (CVE-2023-20178)

Cisco, Don't miss, exploit, Hot stuff, News, PoC, security update, vulnerability, Windows / SecurityTicks

PoC exploit released for Cisco AnyConnect, Secure Client vulnerability (CVE-2023-20178) 23/06/2023 at 17:19 By Helga Labus Proof-of-concept (PoC) exploit code for the high-severity vulnerability (CVE-2023-20178) in Cisco Secure Client Software for Windows and Cisco AnyConnect Secure Mobility Client Software for Windows has been published. About the vulnerability Cisco Secure Client Software – previously known as

React to this headline:

PoC exploit released for Cisco AnyConnect, Secure Client vulnerability (CVE-2023-20178) Read More »