The Hacker News
Backdoor Implanted on Hacked Cisco Devices Modified to Evade Detection
October 24^th 2023 at 06:33

Backdoor Implanted on Hacked Cisco Devices Modified to Evade Detection

By: Newsroom

The backdoor implanted on Cisco devices by exploiting a pair of zero-day flaws in IOS XE software has been modified by the threat actor so as to escape visibility via previous fingerprinting methods. "Investigated network traffic to a compromised device has shown that the threat actor has upgraded the implant to do an extra header check," NCC Group's Fox-IT team said. "Thus, for a lot of devices

🏷️ My labels
- ❌
Article tags
October 24^th 2023 at 06:33

The Hacker News
Warning: Unpatched Cisco Zero-Day Vulnerability Actively Targeted in the Wild
October 17^th 2023 at 04:12

Warning: Unpatched Cisco Zero-Day Vulnerability Actively Targeted in the Wild

By: Newsroom

Cisco has warned of a critical, unpatched security flaw impacting IOS XE software that’s under active exploitation in the wild. Rooted in the web UI feature, the zero-day vulnerability is tracked as CVE-2023-20198 and has been assigned the maximum severity rating of 10.0 on the CVSS scoring system. It’s worth pointing out that the shortcoming only affects enterprise networking gear that have the

Naked Security
Apple silently pulls its latest zero-day update – what now?
July 11^th 2023 at 15:21

Apple silently pulls its latest zero-day update – what now?

By: Paul Ducklin

Previously, we said "do it today", but now we're forced back on: "Do not delay; do it as soon as Apple and your device will let you."

Naked Security
Urgent! Apple fixes critical zero-day hole in iPhones, iPads and Macs
July 10^th 2023 at 23:12

Urgent! Apple fixes critical zero-day hole in iPhones, iPads and Macs

By: Paul Ducklin

Don't delay, do it today. This is a code-implantation bug in WebKit that attackers already know how to exploit.

Naked Security
Apple patch fixes zero-day kernel hole reported by Kaspersky – update now!
June 22^nd 2023 at 00:36

Apple patch fixes zero-day kernel hole reported by Kaspersky – update now!

By: Paul Ducklin

Apple didn't use the words "Triangulation Trojan", but you probably will.

Naked Security
Apple zero-day spyware patches extended to cover older Macs, iPhones and iPads
April 10^th 2023 at 20:20

Apple zero-day spyware patches extended to cover older Macs, iPhones and iPads

By: Paul Ducklin

That double-whammy Apple browser-to-kernel spyware bug combo we wrote up last week? Turns out it applies to all supported Macs and iDevices - patch now!