vulnerabilities
"Publishing security advisories for such critical issues with such limited information only serves to hurt defenders and threat hunters"
"Malicious" images giving hackers access.
"A great way to potentially lock out other adversaries."
Issues include a faulty fix to an issue disclosed two years ago.
Attacks appear to be "linked to legacy credential use during migrations from Gen 6 to Gen 7 firewalls"
"Once on the network, the attackers don't waste time. Their actions are a mix of automated scripts for speed and hands-on-keyboard activity"
“Someone intentionally slipped a live grenade into prod and AWS gave it version release notes.”
All exploitation takes is a “crafted API request”. The bug affects Cisco ISE and ISE-PIC releases 3.3 and 3.4, “regardless of device configuration.”
"A modern zero-day chain with automatic shell drop, full persistence, and zero authentication"