Tag: vulnerability disclosure

  • The Cloudflare Blog: Vulnerability disclosure on SSL for SaaS v1 (Managed CNAME)

    Source URL: https://blog.cloudflare.com/vulnerability-disclosure-on-ssl-for-saas-v1-managed-cname/ Source: The Cloudflare Blog Title: Vulnerability disclosure on SSL for SaaS v1 (Managed CNAME) Feedly Summary: An upcoming vulnerability disclosure in Cloudflare’s SSL for SaaSv1 is detailed, explaining the steps we’ve taken towards deprecation. AI Summary and Description: Yes Summary: The text discusses a vulnerability discovered in Cloudflare’s SSL for SaaS v1…

  • Cisco Talos Blog: Bloomberg Comdb2 null pointer dereference and denial-of-service vulnerabilities

    Source URL: https://blog.talosintelligence.com/bloomberg-comdb2-null-pointer-dereference-and-denial-of-service-vulnerabilities/ Source: Cisco Talos Blog Title: Bloomberg Comdb2 null pointer dereference and denial-of-service vulnerabilities Feedly Summary: Cisco Talos’ Vulnerability Discovery & Research team recently disclosed five vulnerabilities in Bloomberg Comdb2.  Comdb2 is an open source, high-availability database developed by Bloomberg. It supports features such as clustering, transactions, snapshots, and isolation. The implementation of the…

  • The Register: Watch out, another max-severity, make-me-root Cisco bug on the loose

    Source URL: https://www.theregister.com/2025/07/17/critical_cisco_bug/ Source: The Register Title: Watch out, another max-severity, make-me-root Cisco bug on the loose Feedly Summary: Three perfect 10s in the last month – ISE, ISE, baby Cisco has issued a patch for a critical 10 out of 10 severity bug in its Identity Services Engine (ISE) and ISE Passive Identity Connector…

  • Cisco Talos Blog: Patch, track, repeat

    Source URL: https://blog.talosintelligence.com/patch-track-repeat/ Source: Cisco Talos Blog Title: Patch, track, repeat Feedly Summary: Thorsten takes stock of a rapidly evolving vulnerability landscape: record-setting CVE publication rates, the growing fragmentation of reporting systems, and why consistent tracking and patching remain critical as we move through 2025. AI Summary and Description: Yes Summary: The text provides insights…

  • Cisco Talos Blog: Asus and Adobe vulnerabilities

    Source URL: https://blog.talosintelligence.com/asus-and-adobe-vulnerabilities/ Source: Cisco Talos Blog Title: Asus and Adobe vulnerabilities Feedly Summary: Cisco Talos’ Vulnerability Discovery & Research team recently disclosed two vulnerabilities each in Asus Armoury Crate and Adobe Acrobat products.   AI Summary and Description: Yes Summary: The text discusses the recent disclosure of vulnerabilities in Asus Armoury Crate and Adobe Acrobat…

  • Cisco Talos Blog: Know thyself, know thy environment

    Source URL: https://blog.talosintelligence.com/know-thyself-know-thy-environment/ Source: Cisco Talos Blog Title: Know thyself, know thy environment Feedly Summary: In this week’s edition, Bill explores the importance of self-awareness and building repeatable processes to better secure your environment. AI Summary and Description: Yes **Summary:** The content addresses important security vulnerabilities discovered in popular software, highlights the ongoing need for…

  • Cisco Talos Blog: Microsoft Patch Tuesday for June 2025 — Snort rules and prominent vulnerabilities

    Source URL: https://blog.talosintelligence.com/microsoft-patch-tuesday-june-2025/ Source: Cisco Talos Blog Title: Microsoft Patch Tuesday for June 2025 — Snort rules and prominent vulnerabilities Feedly Summary: Microsoft has released its monthly security update for June 2025, which includes 66 vulnerabilities affecting a range of products, including 10 that Microsoft marked as “critical.” AI Summary and Description: Yes **Summary:** The text…

  • The Register: Chinese snoops tried to break into US city utilities, says Talos

    Source URL: https://www.theregister.com/2025/05/22/chinese_crew_us_city_utilities/ Source: The Register Title: Chinese snoops tried to break into US city utilities, says Talos Feedly Summary: Intrusions began weeks before Trimble patched the Cityworks hole A suspected Chinese crew has been exploiting a now-patched remote code execution (RCE) flaw in Trimble Cityworks to break into US local government networks and target…