Cisco has warned of a new zero-day flaw in IOS XE that has been actively exploited by an unknown threat actor to deploy a malicious Lua-based implant on susceptible devices.
Tracked as CVE-2023-20273 (CVSS score: 7.2), the issue relates to a privilege escalation flaw in the web UI feature and is said to have been used alongside CVE-2023-20198 (CVSS score: 10.0) as part of an exploit chain.
“The
Related Post
- November 16, 2024
PAN-OS Firewall Vulnerability Under Active Exploitation – IoCs
Palo Alto Networks has released new indicators of compromise (IoCs) a day after the network security vendor confirmed that a
- November 16, 2024
Warning: DEEPDATA Malware Exploiting Unpatched Fortinet Flaw to
A threat actor known as BrazenBamboo has exploited an unresolved security flaw in Fortinet’s FortiClient for Windows to extract VPN
- November 15, 2024
Friday Squid Blogging: Female Gonatus Onyx Squid Carrying
Fantastic video of a female Gonatus onyx squid swimming while carrying her egg sack. An earlier related post. Blog moderation
- November 15, 2024
Iranian Hackers Deploy WezRat Malware in Attacks Targeting
Cybersecurity researchers have shed light on a new remote access trojan and information stealer used by Iranian state-sponsored actors to