A Network Packet Could Give Attackers Root on Cisco Nexus 9000 Switches
A critical Cisco Nexus 9000 flaw exposes root-level remote code execution through TCP ports 43210 and 43211 on affected Silicon One switches.
Cisco
Every IOS XR Release Has These Seven Holes and Cisco Has No General Workaround
Seven flaws affect every Cisco IOS XR release, two carry a 9.8 score, and operators have no general workaround while planning fixes.
Your ‘American’ AI Model May Still Have Chinese DNA
Cisco warns that model publishers and country labels can hide inherited weights, training data and upstream dependencies.
The Vulnerabilities Were Old. AI Turned 170,000 Servers Into an Operational Queue.
Cisco Talos found UAT-10147 using agentic AI to scale exploitation and post-compromise work across a target list containing approximately 170,000 web-server URLs.
The Firewall Manager Shipped With a Password Attackers Already Knew.
Cisco has documented three distinct FMC attack campaigns, including no-login root access, Sandworm-linked tooling and ransomware preparation. Patch exposed managers and investigate each cluster separately.
The Firewall Did Not Need to Be Breached. Reloading It Was Enough.
Cisco says attackers are exploiting a denial-of-service flaw in ASA and Secure Firewall Threat Defense. The lesson is not only to patch the VPN edge, but to design for the moment the security device itself becomes unavailable.
Five 10.0 Bugs, No Workaround: Cisco Hardens Crosswork and Secure Workload
Cisco fixed nine vulnerability classes across Crosswork and Secure Workload, including five with maximum CVSS scores. There are no workarounds, and several components must be upgraded together.
Phishing Pages Are Becoming Live Operator Consoles.
JWR combines 44 phishing pages with an encrypted WebSocket and live operator commands, turning a fake page into an adaptive fraud session.
WebDialer Was Optional. On Cisco Unified CM, It Became a Path to Root.
Cisco confirmed active exploitation of a Unified CM WebDialer flaw that let unauthenticated attackers write files and work toward root.
The Critical Cisco ISE Flaw Needed Admin Rights. The Other One Needed None.
Cisco ISE's critical command injection required an administrator, while the lower-scored flaw exposed hashed credentials without authentication.