Topic
Network security
-
News Security & privacy
Attackers are exploiting a FortiMail flaw before a fix exists; US agencies get three days to act
Fortinet says an unauthenticated attacker can write files on its email-security appliances. Fixed releases are listed as upcoming, so for now it offers a workaround: switch off one feature.
-
News Security & privacy
An exploited Cisco flaw lets attackers into SD-WAN Manager as admin; US agencies get three days to act
Cisco says an unauthenticated attacker can reach the network-management system's API with admin rights, and there is no workaround. It is the ninth Cisco SD-WAN flaw CISA has listed as exploited this year.
-
News Security & privacy
Critical flaws in F5 and Check Point security products were exploited on the day they were disclosed
Both let an unauthenticated attacker run code: one in F5's BIG-IP access gateway when it acts as an OAuth server, the other in Check Point's management server.
-
News Security & privacy
Cisco says state-backed hackers and a ransomware group are exploiting its firewall management software
One flaw, scored 10 out of 10, gives root access without logging in. Cisco's researchers found a variant of malware previously attributed to Russia's Sandworm on one compromised system.