Tag: advisories
-
The Register: CISA sounds alarm over TP-Link wireless routers under attack
Source URL: https://www.theregister.com/2025/09/08/infosec_in_brief/ Source: The Register Title: CISA sounds alarm over TP-Link wireless routers under attack Feedly Summary: Plus: Google clears up Gmail concerns, NSA drops SBOM bomb, Texas sues PowerSchool, and more Infosec in brief The US Cybersecurity and Infrastructure Security Agency (CISA) has said two flaws in routers made by Chinese networking biz…
-
The Register: No login? No problem: Cisco ISE flaw gave root access before fix arrived, say researchers
Source URL: https://www.theregister.com/2025/07/24/no_login_no_problem_cisco_flaw/ Source: The Register Title: No login? No problem: Cisco ISE flaw gave root access before fix arrived, say researchers Feedly Summary: Shadowserver claims miscreants were already poking at a critical hole in early July, long before Switchzilla patched it Threat actors have actively exploited a newly patched vulnerability in Cisco’s Identity Services…
-
Krebs on Security: Microsoft Fix Targets Attacks on SharePoint Zero-Day
Source URL: https://krebsonsecurity.com/2025/07/microsoft-fix-targets-attacks-on-sharepoint-zero-day/ Source: Krebs on Security Title: Microsoft Fix Targets Attacks on SharePoint Zero-Day Feedly Summary: On Sunday, July 20, Microsoft Corp. issued an emergency security update for a vulnerability in SharePoint Server that is actively being exploited to compromise vulnerable organizations. The patch comes amid reports that malicious hackers have used the Sharepoint…
-
The Register: Microsoft enjoys first Patch Tuesday of 2025 with no active exploits
Source URL: https://www.theregister.com/2025/07/08/microsoft_patch_tuesday/ Source: The Register Title: Microsoft enjoys first Patch Tuesday of 2025 with no active exploits Feedly Summary: Sure, 130 fixes were sent out, but bask in the security goodness For the first time this year, Microsoft has released a Patch Tuesday bundle with no exploited security problems, although one has been made…
-
The Register: Cisco fixes two critical make-me-root bugs on Identity Services Engine components
Source URL: https://www.theregister.com/2025/06/26/patch_up_cisco_fixes_two/ Source: The Register Title: Cisco fixes two critical make-me-root bugs on Identity Services Engine components Feedly Summary: A 10.0 and a 9.8 – these aren’t patches to dwell on Cisco has dropped patches for a pair of critical vulnerabilities that could allow unauthenticated remote attackers to execute code on vulnerable systems.… AI…
-
Embrace The Red: Security Advisory: Anthropic’s Slack MCP Server Vulnerable to Data Exfiltration
Source URL: https://embracethered.com/blog/posts/2025/security-advisory-anthropic-slack-mcp-server-data-leakage/ Source: Embrace The Red Title: Security Advisory: Anthropic’s Slack MCP Server Vulnerable to Data Exfiltration Feedly Summary: This is a security advisory for a data leakage and exfiltration vulnerability in a popular, but now deprecated and unmaintained, Slack MCP Server from Anthropic. If you are using this MCP server, or run an…
-
Cisco Talos Blog: catdoc zero-day, NVIDIA, High-Logic FontCreator and Parallel vulnerabilities
Source URL: https://blog.talosintelligence.com/catdoc-zero-day-nvidia-high-logic-fontcreator-and-parallel-vulnerabilities/ Source: Cisco Talos Blog Title: catdoc zero-day, NVIDIA, High-Logic FontCreator and Parallel vulnerabilities Feedly Summary: Cisco Talos’ Vulnerability Discovery & Research team recently disclosed three zero-day vulnerabilities in catdoc, as well as vulnerabilities in Parallel, NVIDIA and High-Logic FontCreator 15. AI Summary and Description: Yes Summary: The disclosed vulnerabilities highlight significant security…
-
Slashdot: New Moderate Linux Flaw Allows Password Hash Theft Via Core Dumps in Ubuntu, RHEL, Fedora
Source URL: https://it.slashdot.org/story/25/06/02/0140228/new-moderate-linux-flaw-allows-password-hash-theft-via-core-dumps-in-ubuntu-rhel-fedora?utm_source=rss1.0mainlinkanon&utm_medium=feed Source: Slashdot Title: New Moderate Linux Flaw Allows Password Hash Theft Via Core Dumps in Ubuntu, RHEL, Fedora Feedly Summary: AI Summary and Description: Yes Summary: The report discusses two vulnerabilities (CVE-2025-5054 and CVE-2025-4598) in Linux core dump handlers such as Apport and systemd-coredump, which may allow local attackers to access sensitive…