SonicWall is urging customers to immediately reset credentials after cybercriminals accessed encrypted firewall configuration backup files from their MySonicWall cloud service through brute-force attacks, affecting less than 5% of customers. The company recommends disabling WAN access, res...
Cisco has issued an urgent security bulletin for two critical vulnerabilities (CVE-2025-20281 and CVE-2025-20282) in its Identity Services Engine (ISE) and Passive Identity Connector platforms, both rated 10.0 on the CVSS scale. These flaws allow unauthenticated remote code execution with ...
Hackers are actively exploiting a critical backdoor vulnerability in Cisco's Smart Licensing Utility (CSLU) that contains undocumented admin credentials (CVE-2024-20439) and a file access flaw (CVE-2024-20440). Following security researcher Nicholas Starke's publication of technical detail...
Over 12,000 GFI KerioControl firewalls remain vulnerable to a critical security flaw (CVE-2024-52875) that enables remote code execution through HTTP Response Splitting attacks. Despite patches being available, systems across multiple countries remain exposed, with active exploitation atte...
