Experimental News Clipping Site

Tag: shell commands

  • The Register: Cisco’s Secure Firewall Management Center now not-so secure, springs a CVSS 10 RCE hole

    —

    by

    Kurt Seifried
    in

    Source URL: https://www.theregister.com/2025/08/15/cisco_secure_firewall_management_bug/ Source: The Register Title: Cisco’s Secure Firewall Management Center now not-so secure, springs a CVSS 10 RCE hole Feedly Summary: Switchzilla’s summer of perfect 10s Cisco has issued a patch for a maximum-severity bug in its Secure Firewall Management Center (FMC) software that could allow an unauthenticated, remote attacker to inject arbitrary…

  • Cisco Talos Blog: UAT-6382 exploits Cityworks zero-day vulnerability to deliver malware

    —

    by

    Kurt Seifried
    in

    Source URL: https://blog.talosintelligence.com/uat-6382-exploits-cityworks-vulnerability/ Source: Cisco Talos Blog Title: UAT-6382 exploits Cityworks zero-day vulnerability to deliver malware Feedly Summary: Talos has observed exploitation of CVE-2025-0994 in the wild by UAT-6382, a Chinese-speaking threat actor, who then deployed malware payloads via TetraLoader. AI Summary and Description: Yes **Summary:** The text describes the exploitation of a significant remote-code-execution…

  • Microsoft Security Blog: Threat actors misuse Node.js to deliver malware and other malicious payloads

    —

    by

    Kurt Seifried
    in

    Source URL: https://www.microsoft.com/en-us/security/blog/2025/04/15/threat-actors-misuse-node-js-to-deliver-malware-and-other-malicious-payloads/ Source: Microsoft Security Blog Title: Threat actors misuse Node.js to deliver malware and other malicious payloads Feedly Summary: Since October 2024, Microsoft Defender Experts has observed and helped multiple customers address campaigns leveraging Node.js to deliver malware and other payloads that ultimately lead to information theft and data exfiltration. The post Threat…