A recent malware campaign has targeted Cisco networking equipment, exploiting two previously unknown vulnerabilities identified as zero-day flaws to deliver customized malware and conduct covert data collection in targeted environments. Cisco Talos, naming this operation “ArcaneDoor,” has attributed the attacks to UAT4356, an advanced state-sponsored group also known as Storm-1849…
Major Data Breach Allegedly Targets Cisco Systems: Intel Broker Claims Responsibility Intel Broker, a notorious figure in the realm of cybercrime, has asserted that he successfully breached Cisco Systems, Inc., resulting in the theft of a significant trove of sensitive data, including source codes, confidential documents, and various credentials. The…
Microsoft Addresses 61 Security Vulnerabilities in May Patch Update In its latest Patch Tuesday update for May 2024, Microsoft has resolved 61 newly identified security vulnerabilities across its software products, amongst them two zero-day flaws that have been actively exploited in the wild. These updates follow a proactive security strategy…
Check Point has issued a warning regarding a critical zero-day vulnerability affecting its Network Security gateway products, which has already been exploited by cybercriminals in the wild. The vulnerability, designated as CVE-2024-24919 and carrying a CVSS score of 8.6, affects numerous products including CloudGuard Network, Quantum Maestro, Quantum Scalable Chassis,…
The U.S. Cybersecurity and Infrastructure Security Agency (CISA) has reported that threat actors are actively exploiting the outdated Cisco Smart Install feature to compromise sensitive data systems. This legacy technology has become a target due to its vulnerabilities, allowing adversaries to obtain critical system configuration files through various device protocols…
On Tuesday, Microsoft released a set of critical updates addressing a total of 90 security vulnerabilities within its software, including ten zero-day exploits. Notably, six of these zero-days are actively being leveraged in real-world attacks, raising significant concerns regarding the potential for widespread exploitation in the wild. The vulnerabilities span…
Critical Flaw Detected in SonicWall Firewalls, User Action Required SonicWall has issued urgent security updates to mitigate a significant vulnerability in its firewall products, which, if exploited, could allow unauthorized access to these critical network devices. The vulnerability, designated as CVE-2024-40766, has a high Common Vulnerability Scoring System (CVSS) score…
Dell Technologies is grappling with its third data breach within a week, attributed to a threat actor known as “grep.” This breach has resulted in the exposure of sensitive internal documents, including Multi-Factor Authentication (MFA) data, project files, and other proprietary information. As of now, Dell has not provided a…
Cisco Issues Critical Security Patches for Smart Licensing Vulnerabilities Cisco has announced important security updates addressing two severe vulnerabilities within its Smart Licensing Utility, which could potentially allow unauthorized remote attackers to gain heightened privileges or retrieve sensitive information. This warning is particularly crucial for business owners using affected versions…
