Tech · 19 d ago
Hackers exploit new flaws in Cisco and Palo Alto security devices
Severity score of the Cisco flaw
9.8 out of 10
Attackers are exploiting a critical flaw in Cisco's Secure Email Gateway: an email with a crafted attachment can let a sender with no login run commands as root.
Palo Alto Networks says a flaw in its PAN-OS firewall software lets an attacker with valid credentials take root control, and it has seen very limited exploitation.
Oct
17
Saturday
US federal agencies
The US Cybersecurity and Infrastructure Security Agency (CISA) added both flaws to its list of exploited bugs and gave federal agencies until Oct 17 to fix them.
What administrators can do
Cisco customers should update the gateway's Content Scanner Tools to version 25.3.0.5525 or later, and Palo Alto customers should limit firewall management access to trusted internal addresses.
