Tag: network security
Attackers breach Cisco ISE management interface through an API blind spot
Cisco's identity appliance is being hit through an API endpoint that never checked who was asking.
Microsoft moves Teams and M365 web users to new domains
Firewall and proxy rules that allow the old addresses will need updating before early October.
CISA gives agencies until Saturday to patch three exploited flaws
Three exploited networking flaws now carry a three-day federal patch deadline.
MikroTik SSH hijacks need no password, CERT Polska warns
CERT Polska warns that MikroTik routers with SSH exposed to the internet are being hijacked without any authentication.
HPE fixes 34 ArubaOS-CX flaws led by a 9.8 RCE cluster
HPE's AOS-CX updates close 34 CVEs including a 9.8-rated unauthenticated RCE cluster.
Cisco Nexus 9000 switches leave two TCP ports open to root access
A critical Nexus 9000 flaw leaves two TCP ports reachable and hands unauthenticated attackers root privileges.
Ubiquiti patches 22 UniFi bugs including three perfect-10 flaws
Ubiquiti shipped fixes for 22 UniFi vulnerabilities, three of them perfect-10 access control flaws.
Android 17 blocks carrier snooping on visited websites
OS-wide Encrypted Client Hello in Android 17 hides visited domains from carriers and Wi-Fi snoops.