A critical security vulnerability within the Cisco IOS XE environment was identified on October 16, 2023, affecting the Web UI protocol. What is it? This vulnerability allows an unauthenticated remote attacker to create an account on the target system. This account receives privilege level 15 access, granting complete control over the compromised device. The attacker can then leverage this account to take full control of the affected system. The vulnerability has been publicly acknowledged by Cisco and is assigned CVE-2023-20198. Affected products: Devices running Cisco IOS XE if the feature [...]

A flaw has been identified in the handling of multiplexed streams within the HTTP/2 protocol. What is it? The HTTP/2 protocol enables Denial-of-Service (DoS) attacks because request cancellations can rapidly reset numerous connections, as observed in real-world exploitation. The CVSS score for this vulnerability is 7.5. Known as HTTP/2 Rapid Reset, this attack vector exploits a specific capability of HTTP/2: multiplexing concurrent requests over a single TCP connection. Threat actors initiate multiple HTTP/2 connections wherein they transmit requests immediately followed [...]

Apply security patches immediately! Vulnerabilities have been identified in the EXIM mail transfer agent software. Affected versions are those prior to 4.96.1 and 4.97. What is it? EXIM MTA is an open-source email server utilized across UNIX-based environments. In EXIM versions prior to 4.96.1 and 4.97, multiple vulnerabilities have been disclosed. Improper validation of user-supplied inputs allows an attacker to perform various malicious actions, notably memory corruptions to exfiltrate confidential data. For flaws where the vendor provides a [...]

Orange Cyberdefense hit by a cyberattack No rest for cybercriminals! Following TikTok and WeChat, this week Orange Cyberdefense was targeted. The cybersecurity arm of the telecom giant suffered the theft of personal data belonging to over 1,500 clients. The threat actor reportedly published a list on the dark web containing names, phone numbers, email addresses, and company names. This list appears to exclusively affect customers subscribed to the "Micro-SOC Endpoint" service. Affected entities include municipal offices, healthcare facilities, media outlets, and more. While the attackers have not officially stated their motives, the data breach [...]